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Abstract 



In a distributed system with attacks and defenses, both attackers and defenders are self- 
interested entities. We assume a reward-sharing scheme among interdependent defenders; 
each defender wishes to (locahy) maximize her own total fair share to the attackers extin- 
guished due to her involvement (and possibly due to those of others). What is the maximum 
amount of protection achievable by a number of such defenders against a number of attack- 
ers while the system is in a Nash equilibrium! As a measure of system protection, we adopt 
the Defense-Ratio [24j . which provides the expected (inverse) proportion of attackers caught 
by the defenders. In a Defense-Optimal Nash equilibrium, the Defense- Ratio is optimized. 

We discover that the possibility of optimizing the Defense-Ratio (in a Nash equilibrium) 
depends in a subtle way on how the number of defenders compares to two natural graph- 
theoretic thresholds we identify. In this vein, we obtain, through a combinatorial analysis 
of Nash equilibria, a collection of trade-off results: 

• When the number of defenders is either sufficiently small or sufhciently large, there 
are cases where the Defense-Ratio can be optimized. The optimization problem is 
computationally tractable for a large number of defenders; the problem becomes J\fV- 
complete for a small number of defenders and the intractability is inherited from a 
previously unconsidered combinatorial problem in Fractional Graph Theory. 

• Perhaps paradoxically, there is a middle range of values for the number of defenders 
where optimizing the Defense-Ratio is never possible. 
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1 Introduction 



1.1 The Model and its Rationale 

Safety and security are key issues for the design and operation of a distributed system; see, e.g., 
[T] or [HI Chapter 7]. Indeed, with the unprecedented advent of the Internet, there is a growing 
interest to formahze, design and analyze distributed systems prone to malicious attacks and 
{non-malicious) defenses. A new dimension stems from the fact that Internet servers and clients 
are controlled by selfish agents whose interest is the local maximization of their own benefits 
rather than the optimization of global performance [2l[5|lll tll2lll3j . So, it is a challenging task 
to formalize and analyze the simultaneous impact of selfish and malicious behavior of Internet 
agents (cf. [I?]). 

In this work, a distributed system is modeled as a graph G = (y,E); nodes represent the 
hosts and edges represent the links. An attacker represents a virus; it is a malicious client 
that targets a host to destroy. A defender is a non-malicious server representing the antivirus 
software implemented on a subnetwork in order to protect all hosts thereby connected. Here is 
the rationale and motivation for these modeling choices: 

• Associating attacks with nodes makes sense since computer security attacks are often 
directed to individual hosts such as commercial and public sector entities. 

• Associating defenses with edges is motivated by Network Edge Security [20]; this is a 
recently proposed, distributed firewall architecture where antivirus software, rather than 
being statically installed and licensed at a host, is implemented by a distributed algorithm 
running on a subnetwork. Such distributed implementations are attractive since they offer 
increased fault-tolerance and the benefit of sharing the licensing costs to the hosts. 

We focus here on the simplest possible case where the subnetwork is just a single link; a 
precise understanding of the mathematical pitfalls of attacks and defenses for this simplest 
case is a necessary prerequisite to mastering the general case. 

In reality, malicious attackers are independent; each (financially motivated) attacker tries to 
maximize on her own the amount of harm it causes during her lifetime (cf. |30j). Hence, it is 
natural to model each attacker as a strategic player seeking to maximize the chance of escaping 
the antivirus software; so, the strategy of one attacker does not (directly) affect the payoff of 
another. In contrast, there are at least three approaches to modeling the defenses: 

• Defenses are not strategic; this approach would imply the {centralized) optimization prob- 
lem of computing locations for the defenders that maximize the system protection given 
that attackers are strategic. 
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• Defenses are strategic and they cooperate to maximize the number of trapped viruses. This 
is modeled by assuming a single (strategic) defender, which centrahy chooses multiple 
links. This approach has been pursued in [lOj. 

• Defenses are strategic but non-cooperative; so, each defender still tries to maximize the 
number of trapped viruses she catches, while competing with the other defenders. 

We have chosen to adopt the third approach. Our choice of approach is motivated as follows: 

• In a large network, the defense policies are independent and decentralized. Hence, it may 
be not so realistic to assume that a centralized (even selfish) entity coordinates all defenses. 

• There are financial incentives offered by hosts to defense mechanisms on the basis of the 
number of sustained attacks; consider, for example, the following scenaria: 

— Prices for antivirus software are determined through recommendation systems, which 
collect data from networks where scrutinized hosts were witnessed. Such price in- 
centives induce a competition among defenders, resulting to non-cooperation. 

— Think of a network owner interested in maximizing the network protection. Towards 
that end, the owner has subcontracted the protection task to a set of independent, 
deployable agents. Clearly, each such agent tries to optimize the protection she offers 
in order to increase her reward; again, this manifests non-cooperation. 

We materialize the assumption that defenses are independent and non-cooperative on the 
basis of an intuitive reward- sharing scheme: Whenever more than one colocated defenders are 
extinguishing the attacker(s) targeting a host, each defender will be rewarded with the fair 
share of the number of attackers extinguished. So, each defender is modeled as a strategic 
player seeking to maximize her total fair share to the number of extinguished attackers. 

We assume two selfish species with a attackers and 5 defenders; both species may use mixed 
strategies. Note that 6 is proportional to the real cost of purchasing and installing several units 
of (licensed) antivirus software. The very special but yet highly non-trivial case with a single 
defender was originally introduced in [24] and further studied in ETJ [22l [23] . In a Nash 
equilibrium [26\ I27j. no player can unilaterally increase her (expected) utility. 

To evaluate Nash equilibria, we employ the Defense- Ratio; this is the ratio of the optimum 
number a over the expected number of attackers extinguished by the defenders (cf. [21^ I22j). 
Motivated by best-case Nash equilibria and the Price of Stability [3], we introduce Defense- 
Optimal Nash equilibria where the Defense- Ratio attains the value max|l, (Definition 
16. ip : we choose this value since we observe that it is a (tight) lower bound on Defense-Ratio 
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(Corollary I6.2p . (Contrast Defense-Optimal Nash equilibria and the smallest possible Defense- 
Ratio to worst-case Nash equilibria and the Price of Anarchy from the seminal work of Kout- 
soupias and Papadimitriou [H].) A Defense-Optimal graph (for a giyen 6) is one that admits a 
Defense-Optimal Nash equilibrium. 



1.2 Contribution 



We are interested in the possibility of achieying, and the complexity of computing, a Defense- 
Optimal Nash equilibrium for a given number of defenders 5. We discoyer that this possibility 
and the associated complexity depend on 5 in a quantitatiyely subtle way: They are determined 
by two graph-theoretic thresholds for 6, namely -^-^ and 13' {G) (the size of a Minimum Edge 

Cover). (Recall that ^ < 13' {G).) 

Our chief tool is a combinatorial characterization of the associated Nash equilibria we ob- 
tain (Proposition IS.lj ). For Pure Nash equilibria where both species use pure strategies, this 
characterization yields some interesting necessary graph-theoretic conditions for Nash equilib- 
ria (Proposition 15. 9| ). Furthermore, this characterization yields some sufficient conditions for 
Defense-Optimal Nash equilibria (Theorems 16.31 and 16. 5p . 

Our end findings are as follows: 

• When either 6 < oi 6 > P'{G), there are cases allowing for a Defense-Optimal Nash 
equilibrium. 

— The case of few defenders ( with 6 < ) : We proyide a combinatorial characteri- 



zation of Defense-Optimal graphs (Theorem 17. 4p , which points out an interesting 
connection to Fractional (Perfect) Matchings \29\ Chapter 2]. Roughly speaking, 
these graphs make a strict subset of the class of graphs with a Fractional Perfect 
Matching: for a Defense-Optimal graph, and assuming that 5 < it is possible 
to partition some Fractional Perfect Matching of it into 5 smaller, vertex- disjoint 
Fractional Perfect Matchings so that the total weight (inherited from the original 
Fractional Perfect Matching) in each partite is equal to (Theorem l7.4p . Call such 
a Fractional Perfect Matching a 6-Partitionable Fractional Perfect Matching; this is 
a preyiously unconsidered, combinatorial concept in Fractional Graph Theory |29j . 
We proye that the recognition problem for the class of graphs with a (5-Partitionable 
Fractional Perfect Matching is A/'P-complete (Corollary I2.19P : this intractability 
result holds for an arbitrary yalue of 6. Hence, so is the decision problem for a 

Defense-Optimal Nash equilibrium (for 5 < ) (Corollary 17. 7p . To establish the 
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A/'P-completeness of the recognition problem, we develop some techniques for the re- 
duction of Fractional (Perfect) Hatchings (Section 12. 3p : these may be of independent 
interest. 

We note that the recognition problem for the class of graphs with a 5-Partitionable 
Fractional Perfect Matching simultaneously generalizes a tractable and an intractable 
recognition problem: the first one concerns the class of graphs with a Perfect Match- 
ing [7], while the second concerns the class of graphs whose vertex set can be parti- 
tioned into triangles [9l GTll]. 

A further interesting number-theoretic consequence of the combinatorial characteri- 
zation we have derived for Defense-Optimal graphs ^for 5 < -^-^^ is that 6 divides 
\V\ in a Defense-Optimal graph (Corollary 17. Sp . 

On the positive side, we identify another restriction of the class of graphs with a 
Fractional Perfect Matching that are Defense-Optimal in certain, well-characterized 
cases (Theorem 17. sp : these are the graphs with a Perfect Matching. 

— The case of too many defenders (with 6 > (3'{G)): We identify two cases where there 
are Defense-Optimal Nash equilibria with a special structure, namely the vertex- 
balanced Nash equilibria (Definition 19. ip : their structure enables their polynomial 
time computation (Theorems 19.21 and I9.5p . The two corresponding algorithms rely 
on the efficient computation of Minimum Edge Cover, the second algorithm requires 
some relation between S and a (namely, that 2S divides a). 

The case of many defenders (with -^-^ < 6 < [3'{G)): We provide a combinatorial proof 



that there is no Defense-Optimal graph for < 5 < /3'(G) (Theorem 18. ip . This is 

somehow paradoxical since with fewer defenders < -^-^^ , we already identified cases 
with a Defense-Optimal Nash equilibrium. However, since the Defense-Ratio in a Defense- 
Optimal Nash equilibrium has a transition around the value S = this paradox may 
not be wholly surprising. 

Our techniques have identified several new classes of graphs for any arbitrary pair of values 
of 6 and a, such as graphs with (^-Partitionable Fractional Perfect Matching, Defense-Optimal 
graphs and Pure graphs (which admit Pure Nash equilibria); each such class was defined to 
support the existence of some Nash equilibria with a particular structure (for example, Defense- 
Optimal Nash equilibrium or Pure Nash equilibrium). Our results have revealed a fine structure 
among these classes, which is summarized in Figure [H 
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Perfccl-Malching graphs 



Theorem 7.8 
(28 divides |V|, 




Attacker-pure graphs 



Proposition 5.9 
(Condition (i)) 



Figure 1: Some inclusion relationships among the graph classes associated with Nash equilibria 
we have introduced. A directed edge from class Ci to class C2 indicates that Ci C C2; a condition 
on the edge indicates the condition under which the inclusion holds. Clouded directed edges 
indicate inclusions that have been demonstrated to be non-strict. 
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1.3 Related Work and Comparison 

We emphasize that the assumption of 5 > 1 defenders has required a far more challenging 
combinatorial and graph-theoretic analysis than those used for the case of a single defender 
in |10l [211 [22l [23| I24j . Hence, we view this work as a major generalization of the work in |10[ 
EH [221 [23 [21] towards the more realistic case of 5 > 1 defenders. 

The notion of Defense-Ratio generalizes a corresponding definition from [2H Section 3.4] to 
the case of 5 > 1 defenders. The special case where 5 = 1 of Theorem 17.41 was considered in [22^ 
Corollary 2]; this case allowed for a polynomial time algorithm to decide the existence of (and 
compute) a Defense-Optimal Nash equilibrium by reduction to the recognition problem for a 
graph with a Fractional Perfect Matching. In contrast, the decision problem for a Defense- 
Optimal Nash equilibrium ^for an arbitrary 6 < -^-^^ is TVT'-complete (Corollary 17. 7p . 

Schechter and Smith [28] considered the complementary question of determining the mini- 
mum number of defenders to catch a single attacker in a related model of economic threats. 

1.4 Road Map 

The rest of this paper is organized as follows. Section [2] collects together some background and 
preliminaries from Graph Theory. A preliminary combinatorial lemma is formulated and proved 
in Section [31 Section [H presents the game-theoretic framework. The combinatorial structure of 
the associated Nash equilibria is treated in Section[5l Section [6| considers Defense-Optimal Nash 
equilibria. Sections[7l[8]and[9]treat the cases of few, many and too many defenders, respectively. 
We conclude, in Section [TUl with a discussion of the results and some open problems. 

Throughout, for an integer n > 1, denote [n] = {1, . . . ,n}; for a number x ^ 0, sgn(x) 
denotes the sign of x (which is +1 or —1). 

2 Background and Preliminaries from Graph Theory 

Some basic definitions are articulated in Section 12.11 Fractional Matchings are recalled in 
Section 12.21 Some reduction techniques for Fractional (Perfect) Matchings are developed in 
Section [2.31 Section [2.41 treats (^-Partitionable Fractional Perfect Matchings. 

2.1 Basics 

We consider a simple undirected graph G = {V,E) (with no isolated vertices). The trivial 
graph consists of a single edge. We will sometimes model an edge as the set of its two vertices. 
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Denote as dciv) the degree of vertex v in G. An edge {u,v) £ E is pendant if dciu) = 1 but 
dci'^) > 1- A path is a sequence of vertices 1^1,^2, • • • ,Vn+i from V such that for each index 
k € [n], {vi:,Vk+i) S -E; in a cycle C, fn+i = t^i- The cycle C has length n, and C is even (resp., 
odd) if n is even (resp., odd). A triangle is a cycle of length three. We shall sometimes treat C 
as a set of vertices; E{C) denotes the edge set induced by C in the natural way. 

Vertex sets and edge sets induce subgraphs in the natural way. For a vertex set U V, 
denote as G{U) the subgraph of G induced by U; denote EdgeS(j([/) = {{u,v) G E \ u,v G U}. 
For an edge set F C E, denote as G{F) the subgraph of G induced by F; denote VerticesG(-E) = 
U{nt;)G-F{^i shall Sometimes omit the index G when it is clear from context.) A 

component is a maximal connected subgraph. A cycle is isolated (as a subgraph) if it is a 
component; else, it is non-isolated. A component is cyclic if it contains a cycle; else, it is 
acyclic. 

For an undirected graph, both an odd and an even cycle are computable in polynomial time. 
A linear time algorithm to compute an odd cycle is based on incorporating breadth-first search 
into the constructive proof for the characterization of bipartite graphs due to Konig ^14j (cf. 
|15l Proposition 2.27]). Polynomial time algorithms to compute an even cycle have appeared 

in [IHIESIES]. 

A Vertex Cover is a vertex set VC C V such that for each edge (n, v) £ E either u G VC 
or V £ VC; a Minimum Vertex Cover is one that has minimum size, which is denoted as f3{G). 
An Edge Cover is an edge set EC Q E such that for each vertex v £ V, there is an edge 
{u,v) € EC; a Minimum Edge Cover is one that has minimum size, which is denoted as (3'{G). 
Clearly, ^ < f3'{G). Denote as £C{G) the set of all Edge Covers of G. 

A Matching is a set M E oi non- incident edges; a Maximum Matching is one that has 
maximum size. The first polynomial time algorithm to compute a Maximum Matching is due to 
Edmonds [7J. It is known that computing a Minimum Edge Cover is polynomial time reducible 
to computing a Maximum Matching — see, e.g., [31^ Theorem 3.1.22] or [19j. 

A Perfect Matching is a Matching that is also an Edge Cover; so, a Perfect Matching 
has size -^"y^. A Perfect-Matching graph is one that has a Perfect Matching; note that in a 

Perfect-Matching graph, f3'{G) = Since a Perfect Matching is a Maximum Matching, 

any polynomial time algorithm to compute a Maximum Matching yields a polynomial time 
algorithm to recognize Perfect-Matching graphs and compute a Perfect Matching. 

2.2 Fractional (Perfect) Matchings 

A Fractional Matching is a function / : £' ^ [0, 1] where for each vertex v £V , Yle&E\vi^e /(^) — 
1. (Matching is the special case where /(e) G {0, 1} for each edge e G E.) For a Fractional 
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Matching /, induced is the set E{f) = {e G E \ /(e) > 0}; \E{f)\ is the size of /. The range of 
a Fractional Matching / is the set Range(/) = {/(e) | e G E}; so, Range(/) C [0, 1]. 

Given two Fractional Matchings / and /', write f f (resp., /' C /) if E{f') C E{f) 
(resp., E{f') C E{f)). Say that two functions / : -E — > [0, 1] and f : E ^ [0, 1] are equivalent if 
for each vertex v eV, Eeg£;|t,ee fi^) = YleeE\v(^e /'(e)- Clearly, a function f : E ^ [0,1] that 
is equivalent to a Fractional Matching is also a Fractional Matching. 

A Fractional Perfect Matching is a Fractional Matching / such that for each vertex v (zV, 
YleeE\v£e /(e) ~ 1- (Perfect Matching is the special case where /(e) G {0, 1} for each edge 
e E. Note that in this special case, E{f) is a Perfect Matching; for an arbitrary Fractional 
Perfect Matching, E{f) need not be a Perfect Matching.) In this case, for each vertex v € V, 
there is at least one edge e G E with v € e such that /(e) > 0, so that e G E{f); hence, for 
a Fractional Perfect Matching /, E(f) is an Edge Cover. Note that a function f : E ^ [0,1] 
which is equivalent to a Fractional Perfect Matching is also a Fractional Perfect Matching. 

A Fractional Maximum Matching is a Fractional Matching / that maximizes X^cge /(e) 
among all Fractional Matchings. A Fractional Perfect Matching is a Fractional Maximum 
Matching (but not vice versa). We observe a simple property of Fractional Perfect Matchings: 

Lemma 2.1 For a Fractional Perfect Matching f, the graph G{E(f)) has no pendant edge. 

Proof. Assume, by way of contradiction, that G{E{f)) has a pendant edge {u,v) with 
'^G(E{f)){'u) = 1 and diG{E{f)){'i^) > 1- Since / is a Fractional Perfect Matching, J2eGE\uGe f i^) ~ 
1 and Yle£E\v€e f(^) ~ ^- assumption on u, the first equality implies that f{{u,v)) = 1. By 
assumption on v, the second equality implies that f{{u,v)) < 1. A contradiction. ■ 

Lemma 12.11 implies that for a Fractional Perfect Matching /, each component of G{E{f)) is 
either a single edge or a (non-trivial) subgraph of G with no pendant edges; in particular, each 
acyclic component of G{E{f)) is a single edge. The proof for [23 Theorem 2.1.5] establishes as 
a by-product that a Fractional Maximum Matching / with smallest size has no pendant edge; 
so. Lemma 12.11 provides a complementary property for the special case of Fractional Perfect 
Matchings. 

The class of graphs with a Fractional Perfect Matching is recognizable in polynomial time 
via a Linear Programming formulation. (See [Ij for an efficient combinatorial algorithm.) The 
same holds for the corresponding search problem. 

2.3 Reductions of Fractional (Perfect) Matchings 

Our starting point is a combinatorial property of a special case of a Fractional Maximum 
Matching; this property is reported in }291 Theorem 2.1.5]. 
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Proposition 2.2 Consider a Fractional Maximum Matching f with smallest size. Then, f has 
only single edges and odd cycles. 

Proposition 12.21 outlaws, in particular, the induction of even cycles and non-isolated odd cycles 
in a Fractional Maximum Matching with smallest size. In the spirit of Proposition 12.21 we 
shall present two new reduction techniques for a Fractional (Perfect) Matching. The first 
reduction will eliminate all induced even cycles from an arbitrary Fractional Matching. The 
second reduction is applicable only to Fractional Perfect Matchings; it will eliminate all induced 
non-isolated odd cycles when run on a Fractional Perfect Matching with no induced even cycles. 

The corresponding elimination algorithms (EliminateEvenCycles and IsolateOddCycles in Fig- 
ures [2] and HI respectively) are inspired from the corresponding inexistence proof for Proposition 
12. 2i In more detail, that proof assumes the existence of an even or a non-isolated odd cycle and 
derives a contradiction by relying on the property that the Fractional Matching is a Maximum 
one of smallest size; the contradiction is derived by eliminating edges to get a Fractional (Max- 
imum) Matching with less size. In contrast, our elimination algorithms compute in polynomial 
time an even or a non-isolated odd cycle (as long as there are such), respectively; they keep 
eliminating edges (as long as possible) till there are no more even or non-isolated odd cycles, 
respectively. 

2.3.1 Elimination of Even Cycles 

We prove: 

Proposition 2.3 Consider a Fractional Matching f. Then, there is a polynomial time algo- 
rithm to transform f into an equivalent Fractional Matching f f with no even cycle. 

To prove the claim, we present the algorithm EliminateEvenCycles in Figure [2l 
Proof. We start with a first invariant of the algorithm EliminateEvenCycles: 

Lemma 2.4 For each loop iteration o/ EliminateEvenCycles, upon completion of Step (3), /' is 
a Fractional Matching equivalent to f. 

Note that the input Fractional Matching / is already modified in the first (if any) loop iteration 
of EliminateEvenCycles (in Step (4)), while the statement of Lemma [2.41 refers to the input 
Fractional Matching /. The proof of Lemma 12.41 will use the current Fractional Matching /; 
reference to the input / will be restored in an inductive way upon completing the proof. 
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Algorithm EliminateEvenCycles 

Input : A graph G = {V, E) and a Fractional Matching / for G. 
Output : An equivalent Fractional Matching f Q f with no even cycle. 

While G{E{f)) contains an even cycle C do 

(1) Choose an edge gq G E{C) such that /(eo) — inme(=E{C} /(e)- 

(2) Define a function g : E{C) { — 1,+!} with g{e) = —1 or +1 (alternately, starting with 



Figure 2: The algorithm EliminateEvenCycles, which consists of a single loop. The precondition 
for the loop is the existence of an even cycle C; so, upon termination, there will be no even cycle 
for the output /'. (Note that if there are no loop iterations, then /' = /.) Step (1) chooses an 
edge eo on the cycle C on which / is minimized, while Step (2) assigns a sign to each edge e on 
C. (Since C is an even cycle, alternating signs are possible.) The new values for /' are assigned 
in Step (3); note that /'(eo) = 0. Step (4) prepares the input (/) for the next loop iteration. 
An example execution of the algorithm EliminateEvenCycles is illustrated in Figure El 

Proof. Fix any loop iteration of EliminateEvenCycles, upon completion of Step (3). Consider 
any vertex v G V. Then, by Step (3), 



E /'(e) = E /'(e) + E /'(e) 

eeE\vee eeE{C)\vee eeE\E(C)\vee 

E /'(e) + E /(e) 

eeE{C)\v€e eeE\E{C)\vee 

If there is no edge e G E{C) such that v £ e, then T.e(^E{c)\v(^ef'(^) = T.eeE{c)\veef(.^) = 0' 



and we are done. So, assume otherwise. Since C is a cycle, there are (exactly) two edges ei, 
62 € E{C) such that u G ei and v G 62- Note that by Step (2), ^(ei) +5(62) = 0. Hence, by 



5(eo) = -l). 
(3) For each edge e G E, set 




(4) Set / := /'. 
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Figure 3: An example execution of the algorithm EliminateEvenCycles on a graph with a Frac- 
tional Perfect Matching /; the execution terminates after two loop iterations. For each loop 
iteration, edges in E{f ) are drawn thick; edges on the cycle C are drawn clouded. A number 
next to each (thick) edge e G E{f) indicates the value /(e); the sign of g{e) is also indicated 
for each (clouded) edge e on the cycle C. 



13 



Step (3), 

J2 fie) = /'(ei) + /'(e2)+ J2 /(^) 

eeE\vGe eE\E(C)\v£e 

= /(ei)+5(ei)-/(eo) + /(e2)+5(e2)-/(eo)+ J2 /(^) 

ee-E\-E(C)|iiee 

= /(ei)+/(e2) + (g(ei)+5(e2))-/(eo)+ /(^) 

eeB\-E(C)|t)Ge 

= /(ei)+/(e2)+ J2 /(^) 

ee-E\-E(C)|DGe 
ee£;(C)|DGe eG£;\£;(C)|t)6e 

= E /(e)' 

which imphes that /' is equivalent to /. By Step (4), it follows inductively that /' is equivalent 
to the input Fractional Matching /. Since / is a Fractional Matching, this implies that /' is a 
Fractional Matching, and the claim follows. ■ 

We continue with a second invariant of the algorithm EliminateEvenCycles: 

Lemma 2.5 For each loop iteration of EliminateEvenCycles, upon completion of Step (3), (!) 
/' C / and (ii) the even cycle C is eliminated from G{E{f')). 

Similarly to Lemma 12.41 the statement of Lemma 12.51 (Condition (!)) refers to the input Frac- 
tional Matching /. The proof of Lemma [2. 5 1 will use the current Fractional Matching /; reference 
to the input / will be restored in an inductive way upon completing the proof. 

Proof. Fix any loop iteration of EliminateEvenCycles, upon completion of Step (3). Consider 
any edge e £ E. We proceed by case analysis. 

• Assume that e E{C). Then, Step (3), implies that e G E{f') if and only if e E E{f). 

• Assume that e G E{C). Then, e E E{f); so, it holds vacuously that if e € E{f'), then 
e^Eif). 

The case analysis implies that /' C /. Since /'(eo) = while /(eo) > 0, this implies that /' C /. 
By Step (4), Condition (i) follows now inductively. Since /'(cq) = 0, edge eo is eliminated from 
G{E{f')), so that the even cycle C is eliminated from G{E{f')) and Condition (ii) follows. ■ 

Lemma 12.41 and Lemma 12.51 (Condition (i)) together imply that the output /' of algorithm 
EliminateEvenCycles, which contains no even cycle due to the loop precondition, is a Fractional 
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Matching which is equivalent to and contained in /. (By Lemma 12.51 (Condition (ii)), contain- 
ment is strict exactly when there is at least one loop iteration.) 

Lemma [2 . 5 1 ( Condition (i) or (ii)) implies that at least one edge is eliminated from / in each 
loop iteration and no edge is added. Hence, there are at most \E\ loop iterations. Note that 
each loop iteration takes OdE'l) time. Since an even cycle is computable in polynomial time, 
it follows that the algorithm EliminateEvenCycles is polynomial time, and we are done. ■ 

2.3.2 Elimination of Non-Isolated Odd Cycles 

We prove: 

Proposition 2.6 Consider a Fractional Perfect Matching f with no even cycle. Then, there 
is a polynomial time algorithm to transform f into an equivalent Fractional Perfect Matching 
f'(Zf with no non-isolated odd cycle. 

To prove the claim, we present the algorithm IsolateOddCycles in Figure HI 

Proof. Since G{E{f)) has no even cycle, the cycle t;/, • • • ,Vr = vi determined in Step (2/a) is 
odd. We now prove a preliminary property of the algorithm IsolateOddCycles: 

Lemma 2.7 The path vi,V2, ■ ■ ■ ,Vr is disjoint from C\{vo}. 

Proof. By way of contradiction, assume that there is a vertex v/. with k € [r] such that 
Vk € C\{vq}. Since C has odd length, the vertices vq and Vk partition C into two paths Ci and 
C2 of odd and even length, respectively. Consider the two concatenations of the path f 1, • • • ,Vk 
with Ci and C2, respectively; each of them is a cycle in G{E{f)) and one of them has even 
length. A contradiction. ■ 

We start with a first invariant of the algorithm IsolateOddCycles. 

Lemma 2.8 For each inner loop iteration in an outer loop iteration of IsolateOddCycles, upon 
completion 0/ Step (2/e), /' is a Fractional Perfect Matching equivalent to f. 

Note that the input Fractional Perfect Matching / is already modified in the first inner loop 
iteration in the first outer loop iteration of IsolateOddCycles (in Step (2/f)). Reminiscent of 
Lemma 12.41 the statement of Lemma 12.81 refers to the input Fractional Perfect Matching /. 
The proof of Lemma 12.81 will use the current Fractional Perfect Matching /; reference to the 
input / will be restored in an inductive way upon completing the proof. 
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Algorithm IsolateOddCycles 

Input : A graph G = (V, E) and a Fractional Perfect Matching / for G with no even cycle. 
Output : An equivalent Fractional Perfect Matching f ^ f with no non-isolated odd cycle. 

While G{E{f)) contains a non-isolated odd cycle C do 

(1) Choose a vertex G C with '^g(e{j)){'^o) ^ 3 and an edge (wo,fi) G E{f) with vi C. 

(2) While includes aU edges from E{e) U {(uo, ui)} do 

(2/a) Choose a path wi, W2, • ' ' with = f; for some ^ G U [r — 2]. 

(2/b) Define a function g : E{C) U {^.,^^+1) |0<fc<r-l}-> with 

^ or — ^, if e G E{C) (alternately, starting with +^ for an edge incident to uq) 
1 or —1, if e = [vkTVk+i) for < A; < Z — 1 with I > (alternately, starting with —1) 



5(e) 



or — ^, if e = (ufe,ti/j+i) for Z < fc < r — 1 (alternately, starting with a sign opposite 
to the sign of the last value assigned by g) 

(2/c) Choose an edge eo G E{C) U {{vk,Vk+i) |0<A:<r— 1} that realizes the quantity 

r ■ J ■ /(^) • f{iVk,Vk+l)) . f{{Vk,Vk + l)) 

Jo := mm < mm - — ^r^, mm -r—- ttt, mm 



ceE{c) \g{e)y i>o \g{{vk,Vk+i)W i<k<r-i \g{{vk,Vk+i))\ \ ' 

(2/d) If .g(eo) > 0, then set g := ~g. 
(2/e) For each edge e & E, set 

j,^^^ 1 /(e) + .9(e) ■ if e G i?(C) U {(i;^, v^+i) \ < k < r - 1} 



/(e), otherwise 



(2/f) Set /:=/'. 



Figure 4: The algorithm IsolateOddCycles, which consists of an outer loop; the outer loop 
includes an inner loop (Step (2)). The precondition for the outer loop is the existence of a 
non-isolated odd cycle; so, upon termination, there will be no non-isolated odd cycle for /'. 
(Note that if there are no (outer) loop iterations, then /' = /.) For Step (1), note that a 
vertex vq £ C with dG{E{f)){.'>^o) ^ 3 exists since C is non-isolated; vq has two incident edges 
from C and at least one incident edge {vq, vi) outside C. The precondition for the inner loop is 
the inclusion of all edges from E{C) U {{vo,vi)} in E(f); note that C remains a (non-isolated) 
cycle (and the inner loop continues) as long as no such edge has been eliminated from / (by 
Step (2/e)). For Step (2/a), note that a path fi, • • • ,Vr with Vr = vi for some Z G U [r — 2] 
exists since G{E{f)) has no pendant edges (by Lemma l2.ip : this path together with C make 
a bicycle graph. For Step (2/b), note that Lemma 12.71 implies that for any vertex with 
< < r, it holds that C\{vq}. So, Step (2/b) assigns a signed coefficient to each edge 
e G E{C) U {(wfc> ^^fe+i) I < /c < r — 1}. Step (2/c) chooses an edge eo on either the cycle C or 
the outgoing path wi, f2, ■ ■ ■ , that minimizes a certain quantity /o determined from / and g; 

Step (2/d) adjusts g so that (?(eo) < 0. The new values for /' are assigned in 
Step (2/e); note that /'(eo) = (by Step (2/d)). Step (2/f) prepares the input (/) for the next 
(inner) loop iteration. An example execution of the algorithm IsolateOddCycles is illustrated in 
Figure O 
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(a) Before outer loop iteration 1 (b) Before outer loop iteration 2 




(c) Before inner loop iteration 2 within outer loop 

iteration 2. (So, this is the result of inner loop (d) After outer loop iteration 2 

iteration 1 within outer loop iteration 2.) 



Figure 5: An example execution of the algorithm IsolateOddCycles on the graph with a Fractional 
Perfect Matching / (with no induced even cycle) from Figure ^c) . The execution terminates 
after two outer loop iterations; the first outer loop iteration incurs one inner loop iteration, 
while the second outer loop iteration incurs two inner loop iterations. For each (inner or outer) 
loop iteration, edges in E{f) are drawn thick; edges on the cycle C are drawn clouded. A 
number next to each (thick) edge e € E{f) indicates /(e); the sign of g{e) (for each edge e on 
the cycle C), the vertex vq and the edge cq are also indicated for each iteration. 
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Proof. The proof consists of two technical claims. The first claim determines the range of /'. 
Fix any inner loop iteration in an outer loop iteration of IsolateOddCycles, upon completion of 
Step (2/e). We prove: 



Claim 2.9 Range(/') C [0,1]. 

Proof. By Step (2/e), it suffices to consider inductively an edge e from E{C) U {(t'fe, f^+i) | 
0<fe<r — 1}. By Step (2/f), it follows inductively that / is a Fractional Perfect Matching. 

We first prove that /'(e) > 0. By Step (2/e), it suffices to consider the case where g{e) < 0, 
so that g{e) = —\g{e)\. Then, by Step (2/e) and the choice of the edge eo, 

> 0, 

as needed. 

We now prove that /'(e) < 1. By Step (2/e), it suffices to consider the case where g{e) > 0, 
so that g{e) = \g{e)\. We proceed by case analysis on whether there is an edge e' adjacent to e 
such that e and e' are either both on the cycle C or both on the path vq, - ■ ■ ,vi (with Z > 0) or 
both on the cycle f / , • • • ,Vr = vi. 

Assume first that there is such an edge e'; clearly, |5'(e')| = |5'(e)|. Then, by Step (2/e), 



(since / is a Fractional Matching) 
(by the choice of the edge eo) 



as needed. 

Assume now that there is no edge e' adjacent to e such that e and e' are either both on the 
cycle C or both on the path vq, - ■ ■ ,vi (with / > 0) or on the cycle vi, - ■ ■ ,Vr = vi. Since both 
the cycle C and the cycle vi, - ■ ■ ,Vr = vi arc odd, each of them includes at least three edges. It 
follows that edge e lies neither on the cycle C nor on the cycle vi, ■ ■ ■ ,Vr = vi. Hence, edge e 
lies on the path Wq, • • • (with I > 0). Since there is no edge e' adjacent to e on this path, it 



fie) 



fie) + \g{e)\- 



/(eo) 

15(60)1 



< 



< ^ - \9ie')\ ■ SHr + gie) ■ ^ 



\9[eo) 

1, 



5(eo)| 

/(eo) 
l5(eo)| 
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follows that Z = 1, so that e = {vo,vi). So, consider the edges ei and 62 on the cycle C that are 
adjacent to e. By the choice of g, it follows that 15(61)! + |5(e2)| = \g{e)\. Hence, 



/'(e) 



+ (by step (2/e)) 



< 1 — /(ei) — /(e2) + 15(e) I • (since / is a Fractional Matching) 

^ ^-|^(^^)|-rI)T-"^(^^)|-rS]T + 1^(^)1 W (by definition of eo) 



l-(|5(ei)| + 1^(62)1 -|5(e)|)-^ 
1, 

as needed. The proof is now complete. 

We continue with the second technical claim: 

Claim 2.10 /' is equivalent to f. 

Proof. Consider any vertex v Then, by Step (2/e)), 

E /'(e) = E /'(e) + E /'(e) 

eeE\vee eeE(C) U{ivk,Vk+i) | 0<fe<r-l} | vGe eeE\(E(C) U{{vk,Vk+i) | 0<k<r-l}) \ vGe 

E /'(e) + E /(e)- 

eeE{C) U{{vk,Vk+i) I 0<fe<r-l} | vee eeE\{E{C) U{{vk,Vk+i) \ 0<fe<r-l}) | vee 

If there is no edge e G E{C) U {{vk,Vk+i) \ < k < r — 1} such that v E e, then 

E /'(e) = E /(e) 

eeB(C) U{{vk,Vk+i) I 0<fe<r-l} | vGe eeE{C) U{{vk,Vk+i) \ 0<fe<r-l} | vee 

= 0, 

and we are done. So, assume otherwise. Note that by Step (2/b), 

E 3(e) = 0- 

eGE(C) U{(vk,Vk+i) I 0<fc<r-l} | vGe 

Hence, by Step (2/e), 

E /'(e) = E /'(e) + E /(e) 

eeB|uee eeB(C) U{(i;fc,'yfc+i) | 0<fe<r-l} | vee eeE\{E{C) U{{vk,Vk+i) \ 0<fe<r-l}) | vee 

E (/(e) + 5(e) •/o)+ E /(e) 

eeB(C) U{(i;fc,«fc+i) | 0<fc<r-l} | vee eeE\{E{C) U{{vk,Vh+i) \ 0<fe<r-l}) | vee 

E /(e) + /o- E 5(e) 

ee£;(C)U{(tJfc,Dfe+i) I 0<fe<r-l} I vee eeE{C)U{{vk,Vk+i) \ 0<fe<r-l} | vee 

+ E /(e) 

eeE\{E{C) U{{vk,Vk+i) I 0<fe<r-l}) | vee 

E /(e)' 

eeE I vee 
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which imphes that /' is equivalent to /. By Step (2/f), it follows inductively that /' is 
equivalent to the input Fractional Perfect Matching /. ■ 

Since / is a Fractional Perfect Matching, Claims 12.91 and 12.101 imply together that /' is a 
Fractional Perfect Matching, and the claim follows. ■ 

We continue with a second invariant of the algorithm IsolateOddCycles: 

Lemma 2.11 For each outer loop iteration of IsolateOddCycles, (a) for each inner loop itera- 
tion, upon completion of Step (2/e), (i) /' C /, and (ii) some edge from E{C)[J {{vk,Vk+i) \ < 
k < r — 1} is eliminated from E{f'), and (b) for the last inner loop iteration, upon completion 
of Step (2/e), the non-isolated odd cycle C is eliminated from G{E[f')). 

Similarly to Lemma 12.81 the statement of Lemma 12.111 (Condition (a/i)) refers to the input 
Fractional Perfect Matching /. The proof of Lemma [2 . 1 1 1 will use the current Fractional Perfect 
Matching /; reference to the input / will be restored in an inductive way upon completing the 
proof. 

Proof. Consider any outer loop iteration. For Condition (a), consider any inner loop iteration 
within this outer loop iteration, upon completion of Step (2/e). Consider any edge e £ E. 

• Assume that e E{C) U {{vk,Vk+i) \ < k < r — 1}. Then, Step (2/e) implies that 
e G E{f') if and only if e S E{f). 

• Assume that e G E{C) U {{vk,Vk+i) \ < k < r — 1}. Then, e S E{f); so, it holds 
vacuously that if e S E{f') then e G E{f). 

The case analysis implies that /' C /. Since /'(eo) = while /(eo) > 0, this implies that 
/' C /. By Step (2/f), Condition (a/i) follows inductively. 

Since /'(eo) = 0, eo is eliminated from E{f'), so that some edge from E{C) U {{vk,Vk+i) \ 
< A; < r — 1} is eliminated from E{f'), and Condition (a/ii) follows. 

To prove Condition (b), note that Condition (a/i) implies that there is a last inner loop 
iteration (and the outer loop terminates). So, consider the last inner loop iteration. The 
precondition for the inner loop implies that some edge from E{C)U{{vo,vi)} has been eliminated 
from E{f'). Hence, the non-isolated odd cycle C is eliminated from G{E{f')), and Condition 
(b) follows. ■ 

Lemma 12.81 and Lemma 12.111 (Condition (a/i)) together imply that the output /' of the 
algorithm IsolateOddCycles, which contains no non-isolated odd cycle due to the outer loop 
precondition, is a Fractional Perfect Matching which is equivalent to and contained in /. (By 
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Lemma [2. Ill (Condition (b)), containment is strict exactly when there is at least one outer loop 
iteration.) 

Lemma |2 . 1 1 1 implies that at least one edge is eliminated from / in each inner loop iteration 
and no edge is added. Hence, there are at most \E\ inner loop iterations in all outer loop 
iterations. Note that each iteration of the inner loop takes Od-El) time. Since an odd cycle 
is computable in polynomial time, it follows that the algorithm IsolateOddCycles is polynomial 
time, and we are done. ■ 

2.3.3 Recap 

We are now ready to prove: 

Proposition 2.12 Consider a Fractional Perfect Matching f. Then, there is a polynomial 
time algorithm to transform f into an equivalent Fractional Perfect Matching f'^f with only 
single edges and odd cycles. 

To prove the claim, we present the algorithm EliminateEven&ilsolateOddCycles in Figure [6l The 
algorithm is the sequential cascade of the algorithms EliminateEvenCycles and IsolateOddCycles 
from Figures [2] and HJ respectively. 

Algorithm El iminateEven&lsolateOdd Cycles 

Input : A Fractional Perfect Matching / for a graph G. 

Output : A Fractional Perfect Matching /' with no even cycle and no non-isolated odd cycle. 

(1) Apply EliminateEvenCycles on / to obtain /". 

(2) Apply IsolateOddCycles on /" to obtain /'. 

Figure 6: The algorithm EliminateEven&ilsolateOddCycles, incorporating the algorithms Elimi- 
nateEvenCycles and IsolateOddCycles from Figures [5] and [H respectively. 

Proof. By Proposition \2.'6\ f" Q f is a Fractional Perfect Matching with no even cycle, 
which is equivalent to /. By Proposition 12. 6^ /' C /" is a Fractional Perfect Matching with no 
non-isolated odd cycle, which is equivalent to /". It follows that (1) /' is equivalent to / and 
/' C /, and (2) /' has no even cycle and no non-isolated odd cycle. Since / is a Fractional 
Perfect Matching, Condition (1) implies that /' is a Fractional Perfect Matching; by Lemma 
12. H this implies that each acyclic component of G{E{f')) is a single edge. By Condition (2), 
it follows that each cyclic component of G{E[f')) is an (isolated) odd cycle. It follows that /' 
consists of single edges and odd cycles, and the proof is complete. ■ 
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2.4 (5-Partitionable Fractional Perfect Matchings 
2.4.1 Definition and Preliminaries 

We introduce a special class of Fractional Perfect Matchings: 

Definition 2.1 Fix an integer 6 > 1. A Fractional Perfect Matching f : E ^ M is 6- 
Partitionable if the edge set E{f) can be partitioned into 6 (non-empty,) vertex-disjoint par- 
tites El, - ■ ■ ,Es so that for each partite Ej with j € [5], J2eeEj fi^) ~ 

Note that a 1-Partitionable Fractional Perfect Matching is a Fractional Perfect Matching. 
Hence, the decision problem for a 1-Partitionable Fractional Perfect Matching is solved in 
polynomial time. Note also that the restriction of a (5-Partitionable Fractional Perfect Match- 
ing to each partite Ej with j £ [5] is a Fractional Perfect Matching; so, for each partite Ej with 
j € [5], for each vertex v € V{Ej), YleeE\v£e fi^) ~ ^- Since the partites are vertex-disjoint, 
this implies that for each partite Ej with j E [6], for each vertex v £ V{Ej), YleGEj\v€e fi^) ~ ^■ 
We now prove a necessary condition for a 5-Partitionable Fractional Perfect Matching: 

Proposition 2.13 Consider a 5-Partitionahle Fractional Perfect Matching f . Then, for each 



partite Ej with j G [5\, \V[Ej)\ = . 



Proof. Fix a partite Ej with j £ [6] . Then, 




1 



\V{Ej)\ 



2 



Since / is 5-Partitionable, it follows that 



\ViE,)\ = 2.^ /(e) 




as needed. 



Proposition 12.131 immediately implies: 
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Corollary 2.14 If G has a 5-Partitionable Fractional Perfect Matching, then 5 divides \ V\, so 
that 6 < 

We observe that the equality in the necessary condition 6 < in Corollary 12.141 is not always 
necessary: 



Proposition 2.15 There is a graph G and an integer 5 such that G has a 5-Partitionable 
Fractional Perfect Matching while 6 < 

Proof. Consider the cycle graph C3 and fix (5 = 1. Clearly, (3'{Cs) = 2 so that 6 < 
Consider the function / : £{63) [0, 1] with /(e) = ^ for each edge e G £{63). Clearly, / is 
an 1-Partitionable Fractional Perfect Matching, and the claim follows. ■ 

We finally prove that the equivalence relation on Fractional Perfect Hatchings preserves 
(5-Partitionability under a certain containment assumption: 

Proposition 2.16 Consider a 5-Partitionable Fractional Perfect Matching f and an equivalent 
Fractional Perfect Matching f'^f. Then, f is 5-Partitionable. 

Proof. Consider the 5 (non-empty,) vertex-disjoint partites Ei,--- ,Es. Define edge sets 
E[,--- ,E'g so that for each j G [5], E'- = {e G Ej \ /'(e) > 0}. Since /' C /, it follows that 
for each j G [(5], E'- C Ej. This implies that the collection E'^, - ■ ■ ,E'g partitions E{f'). Since 
the partites Ei, - ■ ■ , Es are vertex-disjoint, this also implies that the edge sets E[, - ■ ■ , Eg are 
vertex-disjoint; so call them partites. Fix any partite Ej with j G [5]. Then, 



EeGB, /'(e) (since /'(e) = for each e G E,\E'^) 

' ^ 'J2veV{Ej)J2e(EEj\veef'i^) 
^'J2veV{Ej)J2eeE\veef'i^) 

\ ■ 'EveviE,) 'EeeElvee /(e) (since / and /' are equivalent) 
5 ■ T,vev{E,) 1 (since / is Perfect) 

i-\ViE,)\ 

(by Proposition 



Hence, /' is J-Partitionable, as needed. 
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2.4.2 Characterization 



We show: 



Proposition 2.17 A graph G has a 6-Partitionable Fractional Perfect Matching if and only 
if E contains a collection of 6 (non-empty) vertex- disjoint edge sets Ei,--- ,Es such that (1) 
|Jjg[5] Ej is an Edge Cover, and (2) for each edge set Ej with j G [6], (i) Ej consists of single 

edges and odd cycles, and (ii) = 

Note that the edge sets Ei, - ■ ■ ,Es need not form a partition of E; in contrast, by Condition 
(1), the induced vertex sets V{Ei), • • • , V{Es) are required to form a partition of V. 

Proof. Assume first that G has a 5-Partitionable Fractional Perfect Matching /. By Propo- 
sition 12.121 there is an equivalent Fractional Perfect Matching /' C / with only single edges 
and odd cycles. Since / is 5-Partitionable and /' C /, Proposition 12.161 implies that /' is 
(5-Partitionable. So, the edge set E{f') can be partitioned into 5 (non-empty), vertex-disjoint 
partites -Ei, • • • ,Es so that for each partite Ej with j e [S], X^eeBj /(^) ~ 

Consider now the (vertex-disjoint) edge sets Ei,--- ,Es. Since /' is a Fractional Perfect 
Matching, E{f') is an Edge Cover; so, Ujg[5] an Edge Cover. Consider now any edge set 
Ej with j G [6]. Since /' consists of single edges and odd cycles. Condition (2/i) follows; since 
/' is a Fractional Perfect Matching, Condition (2/ii) follows from Prop osition 1 2 . 1 3l 

Assume now that E contains a collection of 6 (non-empty,) vertex-disjoint edge sets Ei, - ■ ■ ,Es 
such that (1) Uje[5] is an Edge Cover, and (2) for each edge set Ej with j £ [6], (i) Ej is a 

collection of single edges and odd cycles, and (ii) |y(£'j)| = We shall prove that G has a 
5-Partitionable Fractional Perfect Matching /. The proof is constructive. Define the function 
f :E ^[0,1] with 



fie) 



1, \i e £ Ej with j € [S\ and Ej is a single edge 
^, ii e G Ej with j G [5] and Ej is an odd cycle 
0, ifeeE\[j,^[s]Ej 



To prove that / is a Fractional Perfect Matching, consider any vertex v (zV. Since Uj6[5] 
is an Edge Cover, this implies that v G V{Ej) for some j G [5]. There are two cases: 

• Assume that Ej is a single edge Cj. Then, by construction, ^(,eE\vee fi^-) = /(^j) = 1- 

• Assume that Ej is an (isolated) odd cycle, so that v = CjCiCj for a pair of consecutive edges 
ej,e'j on the cycle. Then, by construction, Yl.e€E\vee fi^) = f{ej) + f{e'j) = ^ + ^ = 1. 
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The case analysis implies that / is a Fractional Perfect Matching. To prove that / is 6- 
Partitionable, consider the partites Ei, - ■ ■ ,Es. Fix any partite Ej with j E [5]. Then, 

5 T,vev(E-) 1 (since / is Perfect) 

= (by Condition (2/ii)). 

It follows that / is 5-Partitionable, and the proof is now complete. ■ 
We observe an interesting special case of Proposition 12.171 

Proposition 2.18 A graph G has a ^^-Partitionable Fractional Perfect Matching if and only 
if G is Perfect- Matching. 

Proof. Assume first that G has a -^-^-Partitionable Fractional Perfect Matching. Propo- 
sition 12.171 implies that E contains a collection of -^-^ (non-empty,) vertex-disjoint edge sets 
El, - ■ ■ ,E\y\ such that (1) U riyn -Ej is an Edge Cover, and (2) for each edge set Ej with 



1^1 



T 

(i) Ej consists of single edges and odd cycles, and (ii) |y(£'j)| = 2. By Conditions 



2 

(2/i) and (2/ii), it follows that each edge set Ej with j G [5] is a single edge. Hence, the 
collection of the (vertex-disjoint) edge sets is a Matching. By Condition (1), this implies that 
the collection of the edge sets is a Perfect Matching. 

Assume that G is Perfect-Matching with a Perfect Matching M. Consider the indicator function 
f : E ^ {0, 1} for M, where /(e) = 1 if and only if e G M; so, / is a Fractional Perfect Matching, 



and it remains to show that / is -^-^ -Partitionable. For each edge Cj € M with j G 



1^1 



define the partite Ej := {ej}. Since M is a Perfect Matching, the partites are vertex-disjoint. 
So, for each Ej with j G [6], X^eG-E /(^) = 1 = ~ v^? ^^'^ this completes the proof. ■ 

2-^ 



2.4.3 Complexity 

We define a natural decision problem about (5-Partitionable Fractional Perfect Matchings: 
5-PARTITIONABLE FPM 

Instance: A graph G = {V,E) and an integer 6 which divides \V\. 
Question: Is there a 5-Partitionable Fractional Perfect Matching for G? 



25 



Note that the restriction to instances for which 5 divides | | is inherited from Corohary 12.141 
in order to exclude the non-interesting instances. 

Proposition 12.18] identifies a tractable special case of 5-PARTITIONABLE FPM (namely, 
PARTITIONABLE FPM). We shall use Proposition 12. 171 to show that in the general case where 5 
is arbitrary, 5-PARTITIONABLE FPM is A/''P-complete. To do so, we shall observe an interesting 
relation of some other (intractable) special case of the problem to a well known graph-theoretic 
problem: 

PARTITION INTO TRIANGLES 

Instance: A graph G = {V,E) with \V\ = 35 for some integer 6. 

Question: Can V be partitioned into 6 disjoint vertex sets Vi, • • • , V^, each containing exactly 
three vertices, such that for each j £ [5], E{Vj) is a triangle? 

This problem is known to be A/'T'-complete O GTll, attribution to (personal communication 
with) Schaefer]. (This restriction to graphs G = {V, E) with \ V\ = 2>5\s made in order to exclude 
the non-interesting instances.) To prove that 5-PARTITIONABLE FPM is AAT'-complete (for an 
arbitrary 5), we consider the special case of it with 5 = ^-^: 

^-PARTITIONABLE FPM 

Instance: A graph G = iV, E) with \V\ = 35 for some integer 5. 
Question: Is there a -^-^-Partitionable Fractional Perfect Matching for G? 

(The restriction to graphs G = {V,E) with \V\ = 36 is necessary since 6 = is an integer.) 
To prove that this special case is intractable, we prove that it coincides with PARTITION INTO 
TRIANGLES: it incurs an identical set of positive instances. We prove: 

Proposition 2.19 ^-PARTITIONABLE FPM = PARTITION INTO TRIANGLES 

Proof. Consider a graph G = {V, E) with \ V\ =35 for some integer 5. Assume first that G is a 
positive instance for -^^-PARTITIONABLE FPM. By Proposition 12 . 1 7l E contains a collection 

■ ^ ^ 



of (non-empty,) vertex-disjoint edge sets Ei,--- ,E\y\ such that (1) |J fiyi] Ej is an 



Edge Cover, and (2) each edge set Ej consists of single edges and odd cycles wit 
It follows that each edge set Ej with j € 



h\V{E,)\=3. 

is a triangle. This implies that G is a positive 



instance for PARTITION INTO TRIANGLES (with vertex sets V{Ei), • • • , V{E^y^ )). 

~3" 
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Assume now that G is a positive instance for PARTITION INTO TRIANGLES. Consider 
the corresponding partition of V into 6 = disjoint vertex sets Vi,--- ,V^y^. This par- 

"3" 

tition induces a corresponding partition of E into a collection of -^-^ vertex-disjoint partites 
El, - ■ ■ , where each partite Ej is a single triangle. Proposition 12.171 implies that G has 

a -Partitionable Fractional Perfect Matching. Hence, G is a positive instance for 
PARTITIONABLE FPM, and we are done. ■ 

By Proposition Em it follows that -^-PARTITIONABLE FPM is A/'P-complete. Since 
PARTITIONABLE FPM is a special case of 5-PARTITIONABLE FPM, this implies: 

Corollary 2.20 5-PARTITIONABLE FPM is AfV- complete. 



3 A Combinatorial Lemma 

In this section, we prove a combinatorial lemma that will be useful later. 

For a probability x, we define two probability literals, or literals for short: the positive literal 
X and the negative literal x = 1 — x. A probability product, or product for short, is a product 
of probability literals xi • • • x„ for any n > 1; we adopt the convention that ■■■xi^ = 1 
whenever £2 < ^i- A constant probability product is the trivial one which equals to 1 and has 
no literals. The expansion of a probability product is obtained when substituting each negative 
literal x with \ — x. So, an expansion contains positive literals and no negative literals. 

The probability product positive if all its probability literals are positive. More 

generally, for any integer i < n, the probability product £-positive if exactly i of its 

probability literals are positive; so, an n-positive probability product is a positive probability 
product. For each £ £ [n], denote as Pos£(a;i, . . . ,Xn) the collection of all ^-positive probability 
products with literals defined from the probabilities xi,...,Xn- We prove a combinatorial 
identity for sums of probability products: 

Lemma 3.1 For each integer n > 2, 

fS[ra] X2---Xn£P0Si_i{x2,---,Xn) ^S[n] X2...Xi£P0Si_i{x2,...,Xn) 

Note that the right-hand side (RHS) is a weighted sum of positive probability products, with 
weights of alternating signs. In contrast, the left-hand side (LHS) is a weighted sum of arbitrary 
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(not necessarily positive) probability products, with positive weights; an (£— l)-positive product 
in the LHS is multiplied by j. 

Proof. It suffices to establish that for each £ E [n], each (positive) probability product 
X2 - ■ - Xf E Pos£_i(x2, . . . , Xn) from the RHS appears in the expansion of the LHS with the same 
coefficient. We proceed by case analysis on £. 

• Assume first that 1=1, and fix any product X2 • • • G Pos£_i(x2, . . . , x„) with ^ = 1 in 
the RHS. By convention, there is only one such product and it is constant. The coefficient 
of this product is (—1)^"^ • ^ = 1. 

In the LHS, the only constant term is the constant term in the sum 



Clearly, this constant term is 1 and its coefficient is y = 1. The claim follows for £ = 1. 

• Assume now that i > 2, and fix any product X2 - ■ ■ X£ € Pos£_i(a:2, . . . , Xn) from the sum 
Y^X2--xeePose_i{x2,...,xn) X2---xt in the RHS. Note that all products in Pos^_i(x2, . . . ,Xn) 
(in the RHS) have the same coefficient, which is (—1)^"^ • j. We calculate the coefficient 
of this particular product in the expansion of the LHS. 

Clearly, a fc-positive product with /c > £ in the LHS cannot include X2 - ■ ■ x^ in its ex- 
pansion. So, we only need to consider contributions from the expansions of fc-positive 
products with < A; < ^ — 1 (in the LHS) to the coefficient of the product X2 - ■ ■ xi'iiv the 
expansion of the LHS. 

- Note that there are (^^^) ways to choose k positive literals {ox I — 1 — k negative 
literals) out of the {I — 1) literals X2, ■ ■ ■ ,X£ in order to form a /c-positive product 
that includes X2 - ■ ■ X£ (multiplied with a coefficient) in its expansion. (All literals 
x^+i, . . . ,Xn have to be negative since they do not appear in the product X2 - ■ ■ x^.) 

- The sign of the resulting fc-positive product is (— l)*^^"^)"*^, since each of the {i—l) — k 
negative literals in it contributes one minus sign. (The negative literals x^+i, . . . ,x„ 
do not contribute to the sign.). 

- The absolute value of the coefficient of the resulting fe-positive product is ^ . 
So, the coefficient of a;2 • • • a;^ in the expansion of the LHS is 




X2 ■■■Xn- 



X2—XneP0Se-i{x2,--;X„) 
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^ k n ' k + i ^ \(e-i)-kj^ ' £-((£- 1) ~k) 

o<k<e-i ^ ^ a<k<e-i \^ ^ / \\ j j 



and the claim follows for i >2. 
The proof is now complete. 



0<k<l-l 



k r ' i-k 



1 E : <-')' 

0<k<£-l ^ ' 

)(eQm)'-C)(->') 



)(0 + (-!)'-■) 



4 Game-Theoretic Framework 



Section [d] introduces the strategic game AD„ ,5(G). The associated pure Nash equilibria are 
defined in Section WHK Section considers mixed profiles; their associated Expected Utilities 
are treated in Section 14.41 (Mixed) Nash equilibria are introduced in Section 14.51 Some special 
profiles and corresponding special classes of Nash equilibria are treated in Section 14.61 Some 
notation is articulated in Section [4.71 



4.1 The Strategic Game AD„,5(G') 

Fix integers a > 1 and (5 > 1. Associated with a graph G is a (strategic) game ADa^s{G): 
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• The set of players is A WD; A contains a attackers with i G [a], and V contains 
6 defenders dj with j £ [6] . 

• The strategy set Sa of each attacker a is V; the strategy set Sd of each defender d is 
E. So, the strategy space S is S = (Xae^Sa) x (xdevSd) =V"x . 

A profile (or pure profile) is an (a + 5)-tuple s = [s^^ , • • • , s^^ , s^-^, ■ ■ ■ , s^g) £ S. The 
profile s_b o is obtained from the profile s and a strategy for player h (z AUV hy 
substituting for Sb in the profile s. 

For each vertex v £ V , As{v) = {a G A \ Sa = v} and Ds{v) = {d G V \ v £ Sd}- Assume 
that V Sd- Then, the proportion Propg(d,f) of defender d on vertex v in the profile 
s is given by Props(d,v) = jQ^(^y 

• — The Utility of attacker a is a function Ua : 5 ^ {0, 1} with 



Ua(s) 



if Sa G Sd for some defender d £ V 
if Sa Sd for every defender d £ V 



Intuitively, when the attacker a chooses vertex v, she receives if it is caught by 
a defender; otherwise, she receives 1. 

The Utility of defender d is a function : 5* — > Q with 

|As(u)t ^ |As(t;)| 



Ud(s) 



where sj = {u,v). Intuitively, the defender d receives the fair share of the total 
number of attackers choosing each of the two vertices of the edge it chooses. 



4.2 Pure Nash Equilibria 

The profile s is a Pure Nash equilibrium [221 EZ] if for each player b G AU T>, for each 
strategy tb € S'b, Ub(s) > Ub(s_bOib); so, a Pure Nash equilibrium is a local maximizer for the 
Utility of each player. Say that G admits a Pure Nash equilibrium, or G is Pure, if there 
is a Pure Nash equilibrium for the strategic game ADa^s{G). 



4.3 Mixed Profiles 



A mixed strategy for a player is a probability distribution over her strategy set; so, a mixed 
strategy for an attacker (resp., a defender) is a probability distribution over vertices (resp., 
edges). A mixed profile (or profile for short) a = {(Ta^, ■ ■ ■ ,Caa)0'di) • • • jO'd^) is a collection 
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of mixed strategies, one for each player; {v) is the probabihty that attacker a chooses vertex 
V, and (Td(e) is the probabihty that defender d chooses edge e. 



4.3.1 Supports 

Fix now a mixed profile cr. The support of player b G ^ U P in the profile <t, denoted as 
Support^(b), is the set of pure strategies in to which b assigns strictly positive probability. 
Denote Supports^(^) = IJ^^^ Support^(a) and SupportSo.(D) = |Jdei5 ^^PP°''*cr(^)- ^ mixed 
profile a induces a probability measure Po- (on pure profiles) in the natural way. Note that in 
a pure profile s, SupportSs(^) < a and SupportSs(P) < 5. 

4.3.2 Expectations about Attackers 

For each vertex v ^V, denote as |A|o-(?^) the expected number of attackers choosing vertex v 
in (t; so, 




Clearly, |A|o-(^^) > if and only if t; G SupportSjy(.4). For an edge {u,v) G E, denote 



k\a{{u,v)) 



^\^{u) + \^\cT{v)■ 



We observe: 



Observation 4.1 For a mixed profile cr 





a. 



?;eSupportSo.(^) 



Proof. Clearly, 



■yeSupports^ {A) 



■!;GSupports^(yl) ae.4 



E E -a(.) 



a&A i)€Supports^(^) 




a€A 

= a, 



as needed. 
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4.3.3 Hitting Events and Vertices 



Fix a vertex v ^V. For a defender d, denote as Hit(d,u) the event that defender d chooses an 
edge incident to vertex v; clearly, for the mixed profile cr, 

P^(Hit(d,i;)) = Yl ^d(e). 

eeSupport^(d)|i;6e 

Denote as Hit(v) the event that some defender chooses an edge incident to vertex v. Clearly, 

H\t{v) = [j Hit(d,i;). 

Finally, denote as Dcr{v) the set 

D<t(^) = |d G X> I there is an edge e G Supportjy(d) such that v G e|; 

so, Do-(t') is the set of defenders "hitting" vertex v. 

A vertex v G V is multidefender in the profile a if |Dcr(t')| > 2; that is, a multidefender 
vertex is "hit" by more than one defenders. A vertex v is unidefender in cr if |Dcr(t')| < 1; 
V is monodefender in a if [Dcr(t')| = 1- So, for each unidefender (resp., monodcfcnder) vertex 
V, there is at most (resp., exactly) one defender d with an edge e G Support^(d) such that v G e; 
if there is such a defender, denote it as dcr(f), else, set, by convention, Ff,-^\t{{da-{v),v)) = 0. 

A profile cr is unidefender (resp., monodefender) if every vertex v V is unidefender 
(resp., monodefender) in cr; else the profile cr is multidefender. Note that for a unidefender 
(resp., monodefender) profile cr, for each edge e E E, there is at most (resp., exactly) one 
defender d such that crd(e) > 0; if there is such a defender d, denote it as do-(e), else set, by 
convention, Po-(do-(e), e) = 0. 

4.3.4 Hitting Probabilities 

Since the events Hit(dj, u) and H\t{dj',v) with j ^ f are independent and not mutually exclusive 
(for a fixed vertex v), we immediately obtain a strengthening of the Union Bound: 

Observation 4.2 For each vertex v 



P<T(Hit(i;)) 




^jg^ Po-(Hit(d, v)), if V is multidefender in a 
^jg^ Po-(Hit(d, f )), if V is unidefender in cr 



By the Principle of Inclusion-Exclusion, we immediately observe: 
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Lemma 4.1 For a vertex v (zV , 



iel5] v'cv\\v'\=idev' 



We continue to prove: 

Lemma 4.2 For a mixed profile a, 

Proof. Clearly, 



< 2 (5, if a is multidefender 
= 2 6, if a is unidefender 



v€V d£V ■ugV deX) eeSupport^(d)|i'Ge 

= 25. 



Hence, by Observation 14.2 



Vp (Hit(i;)) I < S»;eyEdGi?^'^(Hit(d,w)), if cr is multidefender 
1 = Y^vevY^dev^o-i^H^^^))^ if cr is unidefender 



< 2 5, if (T is multidefender 
= 2 5, if cr is unidefender 



as needed. 



4.3.5 Minimum Hitting Probability, Maxhit Vertices and Maxhitters 

Denote as 

MinHito- = minPo.(Hit(v)) 
the Minimum Hitting Probability associated with the mixed profile cr. We observe: 



Lemma 4.3 For a mixed profile cr, 

2(5 

MinHito- < — 
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Proof. Assume, by way of contradiction, that MinHito- > Then, 

^F^{U\t{v)) > |y|-MinHit^ 

> 26, 

a contradiction to Lemma 14.21 ■ 

A vertex v ^ V is maxhit in the profile a if Po.(Hit(f )) = 1; say that a defender d G D is a 
maxhitter in a if there is a vertex v G Vertices(Support^(d)) such that Po-(Hit(d, w)) = 1. We 
observe: 

Lemma 4.4 Consider a maxhit vertex v in a profile a. Then, there is a (maxhitter) defender 
d (in a) with F„{H\t{d,v)) = 1. 

Proof. Assume, by way of contradiction, that for each defender d £ V, Po-(Hit(d, u)) < 1. 
Since the set {Hit(d,i;) | d € T>} is a family of independent events with none of them being 
certain, this implies that the event Hit(i') = Udec Hit(d,u) is not certain. So, Po-(Hit(i;)) < 1. 
A contradiction. ■ 

4.4 Expected Utilities 

The mixed profile cr induces an Expected Utility Ub(<T) for each player b AU D, which is 
the expectation (according to cr) of the Utility of player b. We shall derive some formulas for 
Expected Utilities. To do so, we first define and derive formulas for some auxiliary quantities. In 
more detail, we define the Conditional Expected Proportion associated with the defenders; we 
then use it to derive an expression for the Conditional Expected Utility for each attacker. The 
Expected Utility of each attacker is then derived as a weighted sum of Conditional Expected 
Utilities. Similarly, the Expected Utility of each defender is derived as a weighted sum of 
Conditional Expected Utilities defined for the defenders in the natural way. 

4.4.1 Conditional Expected Proportion 

Induced by cr is the Conditional Expected Proportion Propj(cr_cj ov) of defender d G P on 
vertex v, which is the expectation (induced by cr) of the proportion of defender d on vertex v 
had she chosen an edge incident to vertex v. Clearly, 

Prop,(<T_dO^) = E n P-(Hit(d,,t;)) n (l-P<.(Hit(dfe,i;))) 

ee[S] v'cv\{d}\\v'\=i-idke'D' dk<^V'u{d} 

Lemma l3. II implies now an alternative expression for Conditional Expected Proportion. 
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Lemma 4.5 For each pair of a defender d € 2? and a vertex v , 

l£[5] I>'CX)\{d}||0'|=^-ldfceI5' 

4.4.2 Attackers 

Induced by cr is the Conditional Expected Utility [^^{a^^ov) of attacker a G „4 on vertex v, 
which is the conditional expectation (induced by cr) of the Utihty of attacker a had she chosen 
vertex v. Clearly, 



Ua(cr_a oi;) 



l-P^(Hit(t;)). 



By the Law of Conditional Alternatives, we immediately obtain: 



Lemma 4.6 Fix a mixed profile a. Then, the Expected Utility Ua(cr) of an attacker 5 ^ A is 



We continue with a preliminary observation: 



Lemma 4.7 Fix a mixed profile a. Then, for each vertex v €z V , 



.(Hit(?;)) = ^P^(Hit(d,?;))-Propd(cr_dO?;). 



Proof. By Lemma 14.51 

^P^(Hit(d,z;)) • Propd(cr_dOi;) 

/ 



der> 



^P^(Hit(d,^;)) 



•D'CD\{d}dfceI7' 

\v'\=e-i 



EE7(-i)'"' E n ip<^(Hit(d.,.)) 



dieve£[s] 



V'CV\{d} dkeV'U{d} 

\v'\=e-i 



E(-i)'"'-7E E n ^Amd.,v))- 



ee[5] 



deVV'CV\{d} dfce-D'U{d} 
\V'\=l-l 
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Note that for each integer ^ G [5], for each set V" C V with \V"\ = £, there are £ pairs of a 
defender d eV such that d G V" and a set V C V" such that C P \ {d} and |I>'| = ^ - 1. 
Hence, 



J2 n P<x(Hit(dfc,z;)) = E n ^Amdk,v)). 

|X>"|=€ |I>'|=^-1 



It follows that 



^P<,(Hit(d,z;))-Propd((T_dOz;) = E^-^)'"' E 11 Pa(Hit(clfe, ^;)) 

= P,.(Hit(^;)), 



dex> ee[S] v'cv d^ei? 



as needed. 



4.4.3 Defenders 

Induced by a is also the Conditional Expected Utility Uci(cr_cjo(n, v)) of defender d on edge 
{u, v) € -E, which is the conditional expectation (induced by a) of the Utility of defender d had 
she chosen edge {u,v). Clearly, 

Ud((<T_d*(ii,^^))) = Propd(o-_dOu)-|A|o.(u) + Propd(o-_dOi;)-|A|o.(i;). 

We prove: 

Lemma 4.8 Fix a mixed profile a. Then, the Expected Utility of a defender d is 

Ud(cr) = E^-(Hit(d,^))-ProPd(tT_dOi;)-|AU(i;). 

vev 

Proof. By the Law of Conditional Alternatives, 

Ud(CT) = ^ ad{{u,v)) ■Ud{{cT_do{u,v))) 

E o-d((w,w))- (Propd(cr_dOu)-|A|o.(u) + Propd(cr_dOw)-|A|o.(w)) 

{u,v)eE 

= E E ^d(e) ■ Propd(a_d o^;) • |A|^(^;) 

vev \e\vee I 

= P-(Hit(d, v)) ■ Propd(«T_d o v) ■ \k\„{v) , 

vev 

as needed. ■ 
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4.5 Nash Equilibria 

A mixed profile cr is a Nash equilibrium [261 127j if for each player b G AUV, for each mixed 
strategy of player b, Ub(<T) > Ub(c_bOTb); so, a Nash equilibrium is a local maximizer of the 
Expected Utility of each player. A (necessary and) sufficient condition for a Nash equilibrium 
a is that for each player b G ^UP, for each pure strategy tb of player b, Ub(cr) > Ub(cr„bOib)- 
By the celebrated Theorem of Nash [261 [27], ^^a,s{G) has at least one Nash equilibrium. Say 
that G admits a Nash equilibrium with a particular property if the game AD„ 5 has a Nash 
equilibrium with this particular property. 

Clearly, in a Nash equilibrium a, for each attacker a (z A, Ua(c-a o v) is constant over 
all vertices v G Support^(a); for each defender d G P, Ud(cr_d o e) is constant over all edges 
e G Support^(d). It follows that in a Nash equilibrium a, for each attacker a € A, 

Ua(cr) = l-P^(Hit(T;)), 

for any vertex v G Support^(a). So, for each attacker a £ A, the quantity Po-(Hit(f )) is constant 
over all vertices v G Supporto-(a). In the same way, for each defender d £ V, 

Ud(cr) = Propd(cr_d o-u) • |A|o.(n) + Propd(cr_d ou) • |A|o.(z;), 

for any edge {u,v) G Support^(d). So, for each defender d G T>, the quantity Propd(<T_d o u) ■ 
\A\(t{u) + Propd(cr_ci o v) ■ |A|o-(u) is constant over all edges {u,v) G Support^(d). Note that 
in a Nash equilibrium cr, for each defender d £ D, Ud(cr) > 0; in contrast, it is possible that 
Ual"") = for some attacker a G ^. (See, for an example, the proof of Theorem 19. 2[ ) 



4.6 Some Special Profiles 

A profile cr is uniform if each player uses a uniform probability distribution on its support; 

so, for each attacker a G ^, for each vertex v G Support„(a), aa(v) = jc= ^ ^ , m , and for 

' (T\ ji d\ I |Supporto.(a)| 

each defender d G I?, for each edge e G Supporto.(d), <Td(e) = |5^ppQr^ i^^^^y 

A profile cr is attacker- symmetric (resp., defender- symmetric) if for all pairs of at- 
tackers aj and a^ (resp., all pairs of defenders dj and d^), for all vertices v £ V, (resp., all 
edges e € E) cra^{v) = o-a^(u) (resp., (Tdj(e) = ad^{e)). A profile is attacker-uniform (resp., 
defender-uniform) if each attacker (resp., defender) uses a uniform probability distribution 
on his support. Now, Attacker- Symmetric (resp.. Defender- Symmetric) Nash equilib- 
ria and Attacker- Uniform (resp.. Defender- Uniform) Nash equilibria are defined in 
the natural way. A Symmetric Nash equilibrium is both Attacker-Symmetric and Defender- 
Symmetric. A Uniform Nash equilibrium is both Attacker-Uniform and Defender-Uniform. 
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A profile a is attacker-fullymixed (resp., defender-fullymixed) if for each attacker a 
(resp., for each defender d), Supportjy(a) = V (resp., Support^(d) = E). Now, Attacker- 
Fullymixed (resp.. Defender- Fullymixed) Nash equilibria are defined in the natural way. 
A Fullymixed Nash equilibrium is both Attacker-Fullymixed and Defender-Fullymixed. 

A profile a is defender-pure if each defender chooses a single strategy with probability 1 in 
<T. Now Defender-Pure Nash equilibria are defined in the natural way. Say that G admits 
a Defender-Pure Nash equilibrium, or G is Defender- Pure, if there is a Defender-Pure 
Nash equilibrium for the strategic game ADa,s{G)- 

Fix now a Perfect-Matching graph. Say that a profile is perfect-matching if Supports^(X>) 
is a Perfect Matching. Now, Perfect-Matching Nash equilibria are defined in the natural 
way. 

4.7 Notation 

Fix a mixed profile a. For a vertex v eV, set 

Edges^(7;) = {e € Supports^(P) \ v e e} ; 

so, Edges^(i;) consists of all edges incident to v that are included in the union of supports of 
the defenders. For a vertex set U ^V, set 

Edges^(C/) = U Edges^(«); 

veu 

so, E6ges^{U) consists of all edges incident to a vertex in U that are included in the union of 
supports of the defenders. 

For an edge e G set 

VerticeSo-(e) = {v E e \v E SupportSjy(.4)} ; 
so, |VerticeSo-(e)| < 2. For an edge set F C E, set 

\/e\rt\ceScr{F) = [J VerticeSo-(e); 

eeF 

so, VerticeScr(-F) consists of all vertices incident to an edge in U that are included in the union 
of supports of the attackers. 
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5 The Structure of Nash EquiUbria 



We provide an analysis of the combinatorial structure of the Nash equilibria associated with 
the strategic game AD^^siG). Section l5.ll presents a combinatorial characterization of Nash 
equilibria. Some necessary conditions for Nash equilibria are derived in Section 15. 2i Section 
15.31 treats the special case of Pure Nash equilibria. 

5.1 Combinatorial Characterization 



Proposition 5.1 (Characterization of Nash Equilibria) A profile a is a Nash equilib- 
rium if and only if the following conditions hold: 

(1) For each vertex v G SupportSo.(w4), Po-(Hit(?7)) = MinHito-. 

(2) For each defender d E D, for each edge {u,v) G Support^(d), 

Propd(cr_d o u) ■ \A\^{u) + Propd(cr_d o v) ■ \A\^{v) 
= max(„/_„/)g£ I Propd(cr_d om') • \A\criu') + Propd(cr_d o w') • \A\criv') \. 



Proof. Assume first that cr is a Nash equilibrium. To establish Condition (1), consider any 
vertex v £ SupportSo.(^); so, v G Support^(a) for some attacker a. Since <t is a Nash equilibrium, 
Po•(Hit(^;')) is constant over all vertices v' G Support^(a). We prove: 

Lemma 5.2 Fix any vertex u Support^(a). Then, 



Proof. Assume, by way of contradiction, that Po-(Hit(u)) < Fa-{H\t{v)). Define r = a ^ ot^, 
where is any mixed strategy of attacker a such that u G Support.^(a). So, by construction, 
¥^{H\t{u)) = P^(Hit(u)). Then, 



We show: 



P^(Hit(n)) > ¥„{H\t{v)). 



Ua(cr_a OTa) 

= 1 — PT-(Hit(n)) (since u G Support,.(a)) 
= l-P^(Hit(n)) 

> 1 — Pcr(Hit(t;)) (by assumption) 



Ua(o-) (since v G Supporto.(a)) 



a contradiction. 
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We are now ready to prove Condition (1). Consider any vertex u ^ Support^(a) such 
that u € Support^(afc) for some attacker a^. (If such a vertex does not exist, then we are 
done). By Lemma 15. 2| Po-(Hit(u)) < Po-(Hit(u)). Assume, by way of contradiction, that 
Po-(Hit(i;)) < Po-(Hit('u)). Since cr is a local maximizer of the Expected Utility of attacker a^, 
and Ua;,(c) = 1 — Pcr(Hit(n)). Thus, u Support^(afc). A contradiction. 

For Condition (2), fix a defender d and consider an edge (u, f) G Support^(d). Since cr is a 
Nash equilibrium, the quantity Prop^(d,?;') • |A|o-(i'') + Prop^(d,u') • |A|o-(u') is constant over 
all edges {u',v') S Support^(d). So, consider any edge {u',v') Support^(d). Assume, by way 
of contradiction, that 

Propd(cr_d*u') ■ |A|^(M') + Propd(cr_dOw') • |A|^(i;') 
> Propd(cr_d «u) • |A|o.(u) + Propd(cr_d o • l^Wiv). 

Denote r = a ^ o rj, where is any mixed strategy of defender d such that {u',v') € 
Support.^(d). So, by construction, |A|T-(n') = \A\(t{u') and \A\t{v') = \A\a-{v'). Then, 

Ud(<^-d o (""',^^0) 

= Propj(<T_d on') • \A\t{u') + Propj(<T_d ov') ■ \A\t{v') (since e' € Support^(d)) 

= Propd(<T_d on') • |Alo.(-u') + Propd(<T_d oi"') • \f^\cr{v') 

> Propd(cr_cj o n) • |A|o-(n) + Propd(<T_d o u) • |A|o-(f ) (by assumption) 

= Ud(cr) (since (n, u) G Support^(d)) , 

a contradiction. 

Assume now that the mixed profile a satisfies Conditions (1) and (2). We will prove that 
cr is a Nash equilibrium. 

• Consider first an attacker a G ^. Then, for any vertex u ^ Support^(a), 

Ua(<r) 

= 1 - Po-(Hit(i;)) (where v € Support^(a)) 
> 1 - P^(Hit(u)) (by Condition (1)) 

= Ua(cr_aOti)- 

• Consider now a defender d G P. Then, for any edge {u',v') Support^(d), 

Ud(T) 

= Propd(cr_ci o u) ■ \A\a-{u) + Propd(cr_ci o v) ■ \A\a-{v) (where {u, v) G Support^(d)) 
> Propd(cr_d o u') ■ \A\^{u') + Propd(cr_d o v') ■ \A\^{v') (by Condition (2)) . 
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It follows that cr is a Nash equilibrium. The proof is now complete. 



We remark that Proposition 15.11 generalizes a corresponding characterization of Nash equilibria 
for ADq, shown in [24\ Theorem 3.1], where Condition (2) had the simpler counterpart (2'): 

Proposition 5.3 A profile a is a Nash equilibrium if and only if the following conditions hold: 
(1) For each vertex v G SupportSo.(^), Pcr(Hit(f )) = MinHito-. 



5.2 Necessary Conditions 

We now establish necessary conditions for Nash equilibria, which will follow from their char- 
acterization (Proposition 15. 1| ). We first prove a very simple expression for the total Expected 
Utility of the defenders: 

Proposition 5.4 In a Nash equilibrium cr, 



(2') For each edge e G Supports^(P), [A[cr(e) = maxg/g^; < |A|o-(e') 




dev 



Proof. Clearly, 



Edei7E„eyIP-(Hit(d,t;)) • Propd(cr_d * t') • (by LemmalU) 



Evev (EdepIP-(Hit(d,i;)) • Propd(<T_d o z;)) • \A\^{v) 



F^(Hit(w)) • \A\^{v) (by Lemma|4Jl) 

E„eSupports^(^)IP-(Hit(«))-|A|.(i^) 
E„eSupport5„(.A) MinHito • |A|^(i;) (by Proposition O (Condition (2))) 

MinHito •E„eSupports^M)|AU(«) 




as needed. 



We continue to show: 



Proposition 5.5 In a Nash equilibrium 



cr, Supports^(P) is an Edge Cover. 
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Proof. Assume, by way of contradiction, that Supports^(P) is not an Edge Cover. Then, 
choose a vertex t; G F such that f Vertices(SupportSo.(^?))- So, EdgeSo.(u) = and Po-(Hit(w)) = 
0. 

Fix an attacker a £ A. Since <t is a local maximizer for the Expected Utility of a, which is 
at most 1, it follows that a-a{v) = 1. Hence, for each {u',v') € Supports^(I5), \A\a-{{u' ,v')) = 0, 
since both u' ^ u and v' ^ v (by the choice of vertex v). So, |A|o-(?i') = |A|o-(f') = 0. This 
implies that for any defender d V, 

Ud(cr) = ^ o"d((ti,^')) • (ProPd(cr_d o?^) • |A|o-(n) + Propd(cr_d ow) • |A|o.(w)) 

(M,i;)eSupportg. (d) 

= 0. 

Since cr is a Nash equilibrium, Uci(<t) > 0. A contradiction. ■ 
Proposition 15.51 immediately implies: 

Corollary 5.6 A unidefender Nash equilibrium is monodefender. 
We finally show: 

Proposition 5.7 In a Nash equilibrium a, Supports^(^) is a Vertex Cover of the graph 
G(Supports^(P)). 

Proof. Assume, by way of contradiction, that Supports^(^) is not a Vertex Cover of the 
graph G(Supports^(X')). Then, there is some edge {u,v) E Supports^(I?) such that both u 
SupportSo.(^) and v ^ Supports^(^). So, \A\a-{{u,v)) = 0. Assume that {u,v) G Support^(d) 
for some defender d € P. Since cr is a local maximizer for the Expected Utility of defender d, 
it follows that (Td((n, w)) = 0. So, {u,v) Support^(d). A contradiction. ■ 

5.3 Pure Nash Equilibria 

We observe that for the special case of Pure Nash equilibria, Proposition 15.11 simplifies to: 

Proposition 5.8 (Characterization of Pure Nash Equilibria) A pure profile s is a Pure 
Nash equilibrium if and only if the following conditions hold: 

(1) SupportSo.(X') is an Edge Cover. 

(2) For each attacker d gV, for each edge {u,v) G Supportg(d), 

|As(^)| \A.{v)\ ^ \ \tK.{^)\ \k.{v')\ \ 

\\^.(u)\ ^ |D,(«)| K,.')6el|D._,(^/')l + l |D._^.(t;')l + lJ ' 
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We now use Propositions 15.51 and 15.71 to show: 



Proposition 5.9 (Necessary Conditions for Pure Nash Equihbria) Assume that G is 
Pure. Then, (i) 5 > f3'{G) and (ii) a > min^ce^cCG) P{G{EC)). 

Proof. By contradiction. Consider a Pure Nash equilibrium s. For Condition (i), assume 
that 6 < P'{G). Since |SupportSs(D)[ < 6, it follows that |SupportSs(D)[ < /5'(G). Hence, 
SupportSs(I') is not an Edge Cover. A contradiction to Proposition 15.51 

For Condition (ii), assume that a < mmEce£C{G) P{G{EC)). Since |SupportSg(^)| < q, it 
follows that |SupportSg(^)| < mmEceec{G) P{G{EC)). By Proposition 15.51 SupportSs(X') is an 
Edge Cover; so, /3(G(Supports^(2:'))) > mmEce£C(G) PiG{EC)). It follows that |SupportSs(^)| 
< /3(G(SupportSs(P))). Thus, SupportSs(^) is not a Vertex Cover of the graph G(SupportSs(I')). 
A contradiction to Proposition 15.71 ■ 

We remark that Condition (!) (resp., Condition (ii)) in Proposition l5.9l is necessary for Defender- 
Pure (resp., Attacker-Pure) Nash equilibria. We finally provide a counterexample to the con- 
verse of Proposition 15.91 

Proposition 5.10 There is a graph G and integers a and 6 such that (i) 6 > (3'{G) and (ii) 
a > min^(7g£;c((^) [3{G{EG)) while G is not Pure. 



Proof. Consider the graph G = iy, E) in Figure [71 and fix a = 2 and 5 = 6. Clearly, f3'{G) = 6 



assume that G is Pure; consider a Pure Nash equilibirum s. 

• By Proposition 15.51 Supportg(P) is an Edge Cover. By the construction of G, this im- 
plies that SupportSs(X') = {(^2, W3), (^4, t's), ('"4, 1'e), ('"4, wy), (^4, t-s), (^i, w)}, where v G 
{v2-,va}. Since 5 = 6, it follows that for each edge e G SupportSg(D), there is a unique 
defender d such that s^ = e. 

• By Proposition 15.71 SupportSg(^) is a Vertex Cover of the graph G(SupportSs(I?)). By 
the construction of G, this implies that SupportSs(^) = {v2,V4}. (Note that {^2,^4} is 
the unique Vertex Cover of the graph G(SupportSg(D)) with size at most 2.) Since a = 2, 
it follows that Supportg(ai) = V2 and Supportg(a2) = V4. 

Consider now the (unique) defender d £ V such that Sd = (^'4,^5). Clearly, Ud(s) = but 



and ^i^ECeSCiC) — 2. So, Conditions (i) and (ii) from the claim hold. Towards a contradiction, 




1 

> - 



- 3' 



So, Ud(s-d o (^^2)^3)) > Ud(s). A contradiction to the fact that s is a Nash equilibrium. 
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Figure 7: The graph G used in the proof of Proposition 16. 6i Edges in Supportg(P) are drawn 
thick; vertices in Supportg(^) are squared. 

6 Defense-Optimal Nash Equilibria 

Section 16.11 introduces Defense-Optimal Nash equihbria and Defense-Optimal graphs. Some 
sufficient conditions for Defense-Optimal graphs are presented in Section [6.2[ 

6.1 Definitions 

The Defense-Ratio DR^- of a Nash equilibrium cr is the ratio of the optimal total Utility a of 
the defenders over their total Expected Utility in cr; so, 

DR. 



By the definition of Defense- Ratio, Proposition 15.41 immediately implies: 
Corollary 6.1 For a Nash equilibrium cr, 

1 



DR. 



MinHito- 

Clearly, DR^- > 1. Furthermore, Lemma 14.31 implies a second lower bound on Defense- Ratio: 
Corollary 6.2 For a Nash equilibrium a, 

\V\ 

DR^ > — . 

2S 

Our next major definition encompasses these two lower bounds on Defense-Ratio. 
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Definition 6.1 A Nash equilibrium a is Defense- Optimal if DR^ = max l^l, ^^j'- 

The justification for the definition of a Defense-Optimal Nash equilibrium will come later, 
when we construct Defense-Optimal Nash equilibria in two particular cases (Proposition 17.91 

and Theorems 19.21 and I9.5p : these constructions will establish that max-llj^^^j- is a tight 
lower bound on Defense-Ratio. 

Say that that G is Defense- Optimal if G admits a Defense-Optimal Nash equilibrium. 

6.2 Sufficient Conditions 

We show: 

Theorem 6.3 Assume that G has a 5-Partitionable Fractional Perfect Matching. Then, G is 
Defense- Optimal. 

Proof. Consider a (5-Partitionable Fractional Perfect Matching / and the corresponding (non- 
empty) partites Ei, ■ ■ ■ ,Es. Recall that E{f) is an Edge Cover. Construct a as follows: 

• For each attacker a £ A: 

— For each vertex v gV, set (Ta{v) := so, Support^(a) = V. 

So, for each vertex v gV, \A\a-{v) = J2aeA jp^ ~ jpj' 

• For each defender dj S D, with j € [6]: 

— For each edge e G -E, set (Td (e) := -rSj ■ /(e) if e S Ej, and otherwise; so, 

^ I I 

Support^(dj) = Ej and all values of a^- are non-negative. 

Clearly, cr is attacker-symmetric, attacker-uniform, attacker-fullymixed and defender-symmetric; 
moreover, cr is monodefender. Furthermore, for each vertex v V, Edges^(f) = {e G E{f) \ 
V £ e}. To prove that cr is a (mixed) profile, we prove that for each defender dj G V, a^i. is a 
probability distribution (on E). Clearly, 

Z]^d,(e) 

EeeB, f^d,(e) (since Support^(dj) = Ej) 
= HedEj ■ construction) 

= 1 (since / is (5-Partitionable); 
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so, fJdj is a probability distribution, which estabhshes that cr is a profile. 

We continue to prove that <t is a Nash equilibrium. We shall verify Conditions (1) and (2) in 
the characterization of Nash equilibria (Proposition 15. ll) . 

For Condition (1), fix a vertex v £ V. Since E(f) is an Edge Cover, there is a partite 
Ej Q E{f) such that v € Vertices(-Ej). Since the partites Ei,--- ,Es are vertex-disjoint and 
Support^(dj) = Ej, it follows that vertex v is monodefender in a with da-{v) = dj. We prove: 

Claim 6.4 P^(Hit(f)) = 

Proof. Clearly, 

P^(Hit(^;)) 

= Po-(Hit(dj , f )) (since f is monodefender in cr) 

= EeeSupport,{d,)|^Ge ^ " /(«) (by Construction of cr) 

— X^eeSupport^(dj)|?;ee /(^) 

= 1^ EeeEdges^(^) /(«^) (since is monodefender in cr) 

= ^^eeE{f)\veefi(^) 

^ • EeeElvee m (since /(e) = for e E{f)) 

= ■ 1 (since / is a Fractional Perfect Matching), 

as needed. ■ 

By Claim [631 Condition (1) holds trivially. 

For Condition (2), consider a defender d Fix an edge {u,v) € Support^(d). Since cr is 
monodefender, Propj(cr_cj o n) = Propj(cr_d ot;) = 1. Hence, 

Propd(cr_d ^u) • |A|o.(u) + Propd(cr_d ov) • |A|o.(7;) = \A\cr{u) + \A\cr{v) 

_ 2a 

W\' 

Fix now an edge {u',v') Support^(d). Since E{f) is an Edge Cover, there are edges e„' and 
e^i & Ef such that u' € e„' and v' € e^i . By the construction of cr, this implies that there are 
defenders d^' and d^i such that e„/ € Supporto-(dM') and e^,/ E Supporto-(di,/). 

There are two cases for du' (resp., d^/): either d^' = d or d^/ 7^ d (resp., d^' = d or d^^ 7^ d). 
We shall treat each of them separately. 
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• Assume first that d^/ = d (resp., d^,' = d); since u' is monodefender, it follows that 
Propd(cr_d ou') = 1 (resp., Propd(cr_d ov') = 1). 

• Assume now that d^/ ^ d (resp., dy' 7^ d); since v' is monodefender, Propj(cr_cj ou') < I 
(resp., Propd(cr_d o v') < 1). 

So, in all cases, Propj(cr_ci o n') < 1 and Propj((T_d ou') < 1. Thus, 

Propd(o-_d ou') • |A|^(n') + Propd(cr_d o v') ■ |A|^(7;') < |A|^(u') + |A|^(u') 

2a 

M' 

Now, Condition (2) follows. 

Hence, by Proposition 15.11 <t is a Nash equilibrium. By Claim and Condition (1) of Propo- 
sition El it follows that MinHit^. = By Corollary EH it follows that DR^. = -1^. Since G 

has a (5-Partitionable Fractional Perfect Matching, Corollary 12.141 implies that 6 < so that 

max-|l,^^j> = This implies that DRo- = max-|l,^^j>. Hence, a is Defense-Optimal, 
as needed. ■ 
We continue with another sufficient condition: 

Theorem 6.5 Assume that G is Defender- Pure. Then, G is Defense- Optimal. 

Proof. Fix an arbitrary Defender-Pure Nash equilibrium cr; so DRo- = 1. For each defender 
d £ V, denote = {u^,Vd) £ E. Since cr is a Nash equilibrium, Ud(<T) = \J^(a_d o (u^jV^)). 
So, 



EdeDUd(<r) 

a 

X;deiiUd(cr_do(ud,Dd)) 

a 

J2dev (Propd((T_d OMd) • |A|o-(Md) + Propd(cr_d oi^d) • |A|o-(?^d)) 

a 



dev 



AU(Md) 



D^(Md)| 

a 



D^(wd) 



(since cr is Defender-Pure) 



E-uev EdG X^l uGVerticeSo- (Su 



(Support^ (d)) 
a 



D..(^^)| 



E«eSupport5„(^) |f^o-('^)l 



ATO" 



D^(z;) 



g 

EueSupports„(^) l''^lo-(^') 

1. 
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A 



A 



^1 v.^ 



Figure 8: The graph G used in the proof of Proposition 16.61 Edges in E[f) for the 2- 
Partitionable Fractional Perfect Matching / are drawn thick. 



We finahy compare the sufficient conditions for a Defense-Optimal graph from Theorems 16.31 
and 16.51 

Proposition 6.6 There is a graph G and an integer S such that G has a 5-Partitionahle Frac- 
tional Perfect Matching while G is not Defender-Pure. 

Proof. Consider the graph G = {V, E) in Figure El and fix (5 = 2. Consider the function 
/ : £' ^ [0, 1] with /(e) = ^ for each edge e & E \ {(^3,^4)} and /(e) = for e = {v3,Vi). 
Clearly, / is a 2-Partitionable Fractional Perfect Matching with Ei = {(^1,^2), (^^2, ^'s), (^^i, ^^3)} 
and E2 = {(^4,^5), {v5,vq), (^4,^6)}- Since 6 = 2 and f3'{G) = 3, it follows by Proposition 15.91 
(Condition (i)) that G is not Defender-Pure. ■ 

7 Few Defenders 

We consider the case of few defenders where 5 < there, a Defense-Optimal Nash 

equilibrium a has Defense- Ratio DR,^ = max<|l,-y^|> = so that by Corollary 16. 1^ 

MinHito- = This implies that E^eV > 2(5. By Lemma [321 it follows that 

Z^^gy '^'^('^'^(^)) ~ 2(5, so that <T is unidefender. By Corollary 15.61 a is monodefender. 

Section 17.11 provides some necessary conditions for Defense-Optimal Nash equilibria and 
Defense-Optimal graphs. A combinatorial characterization of Defense-Optimal graphs is pre- 
sented in Section 17.21 with an implication on the associated complexity. Section 17.31 considers 
the special case of Perfect-Matching graphs. 




1^1 



. Since 
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7.1 Necesseiry Conditions 



We show a necessary condition for Defense-Optimal graphs: 

Proposition 7.1 Assume that 6 < Then, a Defense- Optimal graph has a 6-Partitionable 
Fractional Perfect Matching. 

Proof. Consider a Defense-Optimal Nash equilibrium a. Recall that <7 is monodefender. 
Since M\nH\t(^{v) = and ]Po-(Hit(w)) = 2(5, it follows that for each vertex v e V, 

We now define a function / : £^ ^ M; we will then prove that / is a (5-Partitionable Fractional 
Perfect Matching. For each edge e & E, set 

j(g) I ^ •<^d.(e)(e), if e e Supports^(r') 

[ 0, otherwise 

By construction, E(f) = SupportSo.(I'); so, for each vertex v € V, {e & E{f) \ v £ e} = 
EdgeSo.(t'). Since <t is monodefender, it follows that for each vertex v ^ V, Po-(Hit(v)) = 
fa{H\t{6a{v),v)). We prove: 



Claim 7.2 For each vertex v & V , 



ee Edges,, {v) 



Proof. By the construction of /, 



E /(«) = E /(«) 

eeEdges^('y) e6Support^(d<,-(ii))|ii6e 

1^1 , 

eeSupport^ (do- {v))\v&e 

1^1 , , 

e6Supporto.(dcr(i)))|i)ee 

= M.p^(Hit(d,(^),^)) 

= M.p^(Hit(t,)) 

_ \V\ 25_ 
26 ' \V\ 
= 1, 
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as needed. ■ 

Since EdgeSo.(f ) = {e G E{f) | v G e}, Claim [712] implies that / is a Fractional Perfect Matching. 
To prove that / is (5-Partitionable, define the (non-empty) sets -Ei, • • • ,Eg where for each j € [6], 
Ej := Supporto.(dj). Clearly, 

\J E, = [j Support^(d,) 

= Supports^(P) 

= E{f). 

Since cr is monodefender, it follows that for all pairs of distinct defenders and d/, Support^(dfc)n 
Support^(d/) = 0. Hence, it follows that the sets Ei,--- ,Es, partition the set E{f); so, we 
shall call them partites. We observe: 

Claim 7.3 For each index j € [6], 

\V\ 



26 



Proof. By the construction of / and the partites Ei, - ■ ■ ,Es, 

e&Ej eeSupportg.(dj) 

E ^•^d.(^) 

eSSupport^ (dj) 

= ^ E ^d,(e) 

eGSupport^(dj) 

'26' 

as needed. ■ 

Claim 17.31 implies that / is (5-Partitionable, and the claim follows. ■ 

Proposition 17. II establishes that the sufficient condition for a Defense-Optimal graph from The- 
orem 16.31 is also necessary when 6 < -^-^ . 



7.2 Characterization and Complexity of Defense-Optimal Graphs 

We now state a combinatorial characterization of Defense-Optimal graphs ^for 6 
sufficiency and necessity follow from Theorem 16.31 and Proposition 17.11 respectively. 
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Theorem 7.4 Assume that 6 < Then, G is Defense- Optimal if and only if G has a 

6-Partitionable Fractional Perfect Matching. 

We observe three impUcations of Theorem 17.41 The first one is an immediate consequence of 
Theorem 17.41 and Corohary 12.141 

Corollary 7.5 Assume that 6 < -^-^ and G is Defense-Optimal. Then, 6 divides \V\. 
The second implication is an immediate consequence of Theorem 17.41 and Proposition I2.18[ 

Corollary 7.6 Assume that 6 = Then, G is Defense- Optimal if and only if it is Perfect- 
Matching. 

Corollary 17.61 identifies a particular value of 6 ^namely, 6 = -^-^^ for which the recognition 
problem for Defense-Optimal graphs is tractable. For the third implication, Theorem 1 7 . 41 implies 
that the complexity of recognizing Defense-Optimal graphs is that of (5-PARTITIONABLE FPM. 
Hence, Proposition [2T9] immediately implies: 

Corollary 7.7 Assume that 6 < Then, the recognition problem for Defense- Optimal 

graphs is J\fV -complete. 



7.3 Perfect-Matching Graphs 

We show: 

Theorem 7.8 Assume that 5 < for a Perfect- Matching graph G. Then, G admits a 
Defense- Optimal, Perfect- Matching Nash equilibrium if and only if 2 6 divides \V\. 

Proof. The claim will follow from Propositions 17.91 and I7.1UI 

Proposition 7.9 Assume that 6 < for a Perfect-Matching graph G, where 2 5 divides \ V\. 
Then, G admits a Defense- Optimal, Perfect-Matching Nash equilibrium. 

Proof. Consider a Perfect Matching M. Construct a profile cr as follows: 

• For each attacker a € A and for each vertex v €V, set 

<^.{v) := 

So, a is attacker-symmetric, attacker-uniform and attacker-fullymixed. Clearly, for each 

a 



vertex v |A|o-(v) = rpr 
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• Partition M into 6 sets Mi, • ■ • , Ms, each with edges; each defender dj with j G [5] 
uses a uniform probabihty distribution over the set Mj. So, for each edge e G Mj, set 

crd.{e)(e) := y^- 

Thus, Support^(dj) = M,- for each j G [(^], so that SupportSo.(^?) = M. Clearly, each 
vertex f G is monodefender in cr with Po-(Hit(f)) = ¥„{h\\t{da-{v),v)) = 

We shall verify Conditions (1) and (2) in the characterization of Nash equilibria (Proposi- 

OA 

tion lS.ip . For Condition (1), fix a vertex v gV. Since P^(Hit(v)) = Condition (1) follows 
trivially. For Condition (2), consider any defender d £ V. 

• Fix an edge {u,v) G Support^(d). Since each edge is monodefender in cr, it follows that 
Propj(cr_d ou) = Propd(cr_d ot;) = 1. Hence, 

2a 

Propd(cr_d on) • |A|o.(n) + Propd(<T_d ov) • |A|o.(7;) = 

• Fix now an edge {u',v') Supporto-(d). Since M is an Edge Cover, there are edges 
eu',ey' G M such that u' G e^' and G e^,/. By the construction of cr, this implies that 
there are defenders d^/ and d„' such that Cu' G Support^(d„') and e^' G Support^(dt,'). 
Since each vertex is monodefender in cr, it follows that d ^ d^' and d ^ d^,'. Hence, 
Propd(cr_ci ou') < ^ and Prop^ (cr_d ou) < so that 

Propd(<T_d o u') ■ \AUu') + Propd(cr_d ot;') • \AUv') < ^ ■ (|A|^(n') + |AUK)) 

a 

Wl' 

Now, Condition (2) follows. Hence, by Proposition 15.11 cr is a Nash equilibrium. 

To prove that cr is Defense-Optimal, recall that for each vertex v G V, Po-(Hit(f)) = 
Hence, MinHito- = By Corollary [6Tl it follows that DRo- = Since 6 < it follows 
that DRo- = max "ll, ^^j'- Hence, cr is Defense-Optimal. ■ 
We continue to prove: 

Proposition 7.10 Assume that 6 < -^-^ for a Perfect-Matching graph G, which admits a 
Defense- Optimal, Perfect-Matching Nash equilibrium. Then, 2 6 divides \V\. 
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Proof. Consider such a Nash equihbrium cr, and recall that MinHito- = Consider an 

edge {u,v) € Supports^(I'); so, e G Support^(d) for some defender d € P. Proposition 15.71 
implies that SupportSo.(^) is a Vertex Cover of the graph G(SupportSCT(D)). Hence, either 
u € Supports^(^) or f € Supports^(^) (or both). Assume without loss of generality, that 
u G Supports^(^). Since cr is monodefender, there is a single defender such that u G 
Vertices(Supporto.(d)). Hence, d^ is identified with d. Since cr is Perfect-Matching, Supporto.(d) 
is a Perfect Matching; this implies that Po-(Hit(f)) = Sd(e). We prove: 

Claim 7.11 |Support^(d)| = 
Proof. Clearly, 

^ a,{e) = IP-(Hit(i^)) 

egSupport^ (d) egSupport^ (d) 

= |Supporto.(d)| • 1^ 

Since cr is a profile, X]eeSupport^(d) ^d(e) = 1. Hence, |Support^(d)| = as needed. ■ 

Claim [T.lll immediately implies that 26 divides \V\, as needed. ■ 

The claim follows now from Propositions 17.9 1 and 17.101 ■ 

Note that while Corollary 17.51 applies to all graphs. Proposition 17.101 applies only to Perfect- 
Matching graphs. However, the restriction of Corollary 17.51 to Perfect-Matching graphs does 
not imply Proposition 17.10] unless 5 is odd. (This is because 2 divides \V\ and 6 divides \V\ 
imply together that 26 divides \V\ exactly when 6 is odd.) Hence, Proposition 17.101 strictly 
strengthens Corollary 17.51 for the case where 6 is even. 



8 Many Defenders 

We now consider the case of many defenders, where -^-y^ < 6 < P'{G). In this case, a Defense- 
Optimal Nash equilibrium cr has Defense-Ratio DRo- = max |l,^| = 1. By Corollary ED 

this implies that MinHito- = 1. It follows that for each vertex v & V, Po-(Hit(v)) = 1, so that 
the number of maxhit vertices in cr is \V\. We show: 

Theorem 8.1 Assume that < 6 < f3'{G). Then, G is not Defense- Optimal. 
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Proof. Towards a contradiction, consider a Defense-Optimal Nash equilibrium cr. Consider any 
(maxhit) vertex v £V. By Lemma [4. 4^ there is a maxhitter d G 2? in cr with Po-(Hit(d, f )) = 1. 
Use <T to construct a defender-pure profile r as follows: 

• Fix a defender d £ T>. If d is maxhitter in <t, then is any edge (u, f) G Support^(d) 
such that d is maxhitter in cr for the vertex v else, is any arbitrary edge (n, v) G 
Supporto.(d). 

By construction of r, the following conditions hold: 

(1) |Supports^(P)| < 6. 

(2) Each maxhit vertex in cr remains a maxhit vertex in r; so, the number of maxhit vertices 
in T is \V\. 

Since 5 < P'{G), Condition (1) implies that |SupportST.(r')| < f3'{G). Hence, SupportST.(I?) 
is not an Edge Cover. So, there is some vertex v £ V with PT-(Hit(w)) = 0. It follows that the 
number of maxhit vertices in r is less than \V\. A contradiction. ■ 



9 Too Many Defenders 

We finally turn to the case of too many defenders where 6 > P'{G). In this case, — 
< 1; so, a Defense-Optimal Nash equilibrium cr has Defense- Ratio DRo- = 1. By 
Corollarv l6.1l this implies that MinHito- = 1; so, that for each vertex v (zV, Po-(Hit(ti)) = 1. 

Section 19.11 introduces vertex-balanced profiles. These profiles give rise to Defender-Pure, 
Vertex-Balanced Nash equilibria and Pure, Vertex-Balanced Nash equilibria, which will be 
treated in Sections 19.21 and 1 9.31 respectively. 

9.1 (Defender-Pure and Pure,) Vertex-Balanced Profiles 

We start with a significant definition: 

Definition 9.1 A mixed profile a is vertex- balanced if there is a constant c > such that 
for each vertex v € V, 

\DUv)\ 
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The following properties follow trivially for a vertex-balanced profile a: 



1 The set SupportSo.(I?) is an Edge Cover. This matches the necessary condition for an 
arbitrary Nash equilibrium from Proposition 15.51 

2 The set Supports^(^) is V . Note that this property is strictly weaker than the condition 
defining an attacker-fullymixed profile cr, which requires that for each attacker a € 
Supporto.(a) = V. 



We shall consider defender-pure, vertex-balanced profiles and pure, vertex-balanced profiles. 
We prove a nice property of defender-pure, vertex-balanced profiles. 



Proposition 9.1 A defender-pure, vertex-balanced profile is a local maximizer for the Expected 
Utility of each defender. 



Proof. Consider such a profile cr and a defender d & T> with = {u,v). Clearly, 

11 ( . , |A|^(^) 

= 2c. 

Fix now an edge {u',v') Support^(d). Clearly, 



r ^ / /AN lAjcrK) , \AUv') 

\Jd{(T^dO{u,v)) = ———— + 



|D^(n')| + l \D^{v')\ + l 
\/\Uu') \AUv') 
\D^{u')\ ^ \D^{v')\ 
= 2c, 



and the claim follows. 



Proposition 19.11 implies that a defender-pure, vertex-balanced profile, which is a local maximizer 
for the Expected Utility of each attacker, is a Nash equilibrium. We shall present polynomial 
time algorithms to compute Defender-Pure, Vertex-Balanced Nash equilibria and Pure, Vertex- 
Balanced Nash equilibria which are Defense-Optimal for the case where 6 > /3'{G); the second 
algorithm will require an additional assumption. 



9.2 Defense-Optimal, Defender-Pure, Vertex-Balanced Nash Equilibria 



We show: 
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Algorithm DefenderPure<S^VertexBa lanced NE 

Input: A graph G = {V,E) such that S > (3'{G). 

Output: A Defense-Optimal, Defender-Pure Vertex-Balanced Nash equilibrium cr. 

(1) Choose a Minimum Edge Cover EC . 

(2) Assign each defender to a distinct edge from EC in a roimd-robin fashion. 



(3) Determine a solution {A(u) | v £ y| to the following linear system: 

(a) For each vertex v & V , , W is constant. 

(b) E„eyA(«)=a. 

(4) Assign a mixed strategy cr to each attacker in an arbitrary way so that for each vertex w G y, 
\kU{v)^k{v). 

Figure 9: The algorithm DefenderPure&iVertexBalancedNE. By Step (2), a is defender-pure; 

note that the assignment exchausts all edges from the Minimum Edge Cover EC due to the 

assumption that 5 > (3'{G). Step (3) provisions for a to be vertex-balanced; towards this end, it 

Aft;) 

provides for the ratio ||-^ ^^^^| to be constant over all vertices v . Finally, Step (4) provides 
mixed strategies to the attackers that induce |A|o.(f) = Afu) for each vertex v ^ V; hj Step 
(3/a) this implies that tr is vertex-balanced. Since a Minimum Edge Cover is computable in 
polynomial time, the algorithm DefenderPure&iVertexBalancedNE is polynomial time. 

Theorem 9.2 Assume that 5 > (3'{G). Then, G admits a Defender- Pure, Vertex- Balanced 
Nash equilibrium, which is computable in polynomial time. 

To prove the claim, we present the algorithm DefenderPure&iVertexBalancedNE in Figure [9l 

Proof. By construction (Steps (1) and (2)) and the assumption that 6 > (3'{G), it follows 
that Supports^(I5) is a Minimum Edge Cover. Since cr is defender-pure, this implies that for 
each vertex v (zV, Po-(Hit(f)) = 1; hence, for each attacker a € ^, 

[J,ia_,ov) = l-P^(Hit(t;)) 
= 0. 

This implies that cr is (vacuously) a local maximizer for the Expected Utility of each attacker. 
By Proposition 19. 11 it follows that cr is a Nash equilibrium. ■ 

By Theorem 16.51 and Theorem 19. 2| it immediately follows: 
Corollary 9.3 Assume that 5 > (3'{G). Then, G is Defense Optimal. 
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By Theorem 15.91 (Condition (i)) and Theorem I9.2t it finally follows: 
Corollary 9.4 G is Defender-Pure if and only if 5 > (3'{G). 

Since a Minimum Edge Cover is computable in polynomial time, Corollary 19.41 implies that the 
class of Defender-Pure graphs is recognizable in polynomial time (for an arbitrary value of 6). 

9.3 Defense-Optimal, Pure, Vertex-Balanced Nash Equilibria 

We show: 

Theorem 9.5 Assume that S > I3'{G) and 2 5 divides a. Then, G admits a Defense- Optimal, 
Pure, Vertex- Balanced Nash equilibrium, which is computable in polynomial time. 

To prove the claim, we present the algorithm Pure&VertexBalanced in Figure [TOl The proof of 
Theorem 19.51 is identical to the proof of Theorem 19.21 

Algorithm Pure(S^VertexBalancedNE 

Input: A graph G = {V,E) such that 5 > P'{G) with 26 divides a. 
Output: A Defense-Optimal, Pure, Vertex-Balanced Nash equilibrium s. 

(1) Choose a Minimum Edge Cover EC. 

(2) Assign each defender to a distinct edge from EC in a roimd-robin fashion. 

(3) For each vertex v eV, set A{v) := |Do.(w)| ■ 

(4) Assign each attacker to a vertex from V in an arbitrary way so that for each vertex v € V, 
\AUv)=Aiv). 

Figure 10: The algorithm Pure&VertexBalancedNE. The algorithm Pure&iVertexBalancedNE dif- 
fers from the the algorithm DefenderPure&VertexBalancedNE only in Steps (3) and (4). The 
additional assumption that 26 divides a suffices for Steps (3) and (4) to construct an attacker- 
pure profile. By Step (2), cr is defender-pure. Step (3) provisions for a to be vertex-balanced; 
towards this end, it sets the ratio |^^|^^^| to the fixed (integer) value ^ for each vertex v ^ V. 
Hence, for each vertex v & V, A{v) is integer. Finally, Step (4) assigns pure strategies to the 
attackers that induce the (integer) value |A|o-(v) = A(?;) for each vertex v € V; hence, cr is 
vertex-balanced by construction. Since a Minimum Edge Cover is computable in polynomial 
time, the algortihm Pure&iVertexBalancedNE is polynomial time. 
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10 Epilogue 



We proposed and analyzed a new combinatorial model for a distributed system like the Internet 
with selfish, malicious attacks and selfish, non-malicious, interdependent defenses. Through an 
extensive combinatorial analysis of Nash equilibria for this model, we derived a comprehensive 
collection of (in some cases surprising) trade-off results between the number of defenders and 
the best possible Defense-Ratio of associated Nash equilibria. 

Our work leaves numerous open problems relating to («) the worst-case Nash equilibria for 
this model, (ii) the investigation of alternative reward-sharing schemes for the defenders and 
{in) the complexity of computing and verifying (Defense-Optimal) Nash equilibria (especially 
for the case of too many defenders) in this model. 

Acknowledgments. We thank Martin Gairing, Loizos Michael, Florian Schoppmann, Karsten 
Tiemann and the anonymous HICSS 2008 reviewers for many helpful comments and suggestions 
on earlier versions of this paper. 
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